Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: JCrRhE/B0KmBwsNvnRUHRF0ExpecbrpjzxiuxvuQ1r8=
Subject key identifier: FF:C0:7A:5A:4A:EE:C5:4F:B4:B0:8D:3E:D9:AC:03:20:36:EC:EA:8A
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 0197B6A1B7522ED3B1C199E6A3868055A1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: IdjxMhhp5DQGT6vjrx2QAE58MtcFkN3THCXdtrGyCgc=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b7:52:2e:d3:b1:c1:99:e6:a3:86:80:55:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=ffc07a5a4aeec54fb4b08d3ed9ac032036ecea8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:b9:2c:13:cd:9f:de:14:2f:d3:15:c1:e9:
13:98:a8:3f:2d:e3:5a:49:29:63:77:fd:9b:2f:50:
be:64:59:95:8c:1b:66:54:08:18:22:7c:4d:eb:d2:
cd:08:2c:0c:28:0a:f3:9b:ff:0a:de:bc:8b:45:44:
4f:24:6b:05:dd:84:68:fd:4a:bf:13:7e:0c:e6:81:
72:27:90:fa:e2:cc:79:ad:43:d8:06:e8:d1:5e:8d:
18:48:3b:b1:cd:aa:b9:6f:7a:79:02:b6:91:84:b6:
5d:e2:ee:2c:0b:ba:b9:a6:e5:97:14:8b:00:b1:c9:
b0:33:2c:90:55:70:c3:fb:8d:de:5d:f4:3e:85:a1:
57:4a:93:e9:a2:6c:83:06:1b:91:5b:c7:a8:17:4e:
83:c2:a7:a9:1d:e8:c7:70:73:11:1d:0b:62:a1:9e:
94:49:df:8c:e1:a5:65:53:7d:d2:b5:a8:0f:ea:19:
cf:6c:e9:5c:3f:c6:e2:6b:2a:d1:88:07:37:28:11:
7d:a9:4b:a8:dc:f3:b0:bf:41:c2:f2:13:db:f5:98:
0c:8a:ca:4c:7e:fc:0c:e4:39:1b:59:55:bc:f3:f5:
11:80:65:33:a8:78:3a:50:63:32:6e:75:8c:ab:fd:
a0:68:c0:dc:f2:0d:34:de:3b:f3:15:12:80:71:bc:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C0:7A:5A:4A:EE:C5:4F:B4:B0:8D:3E:D9:AC:03:20:36:EC:EA:8A
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0a:2f:28:6c:d0:2f:17:5c:b9:74:cc:e0:5e:50:72:71:5f:
88:ef:ed:62:df:9a:25:fd:46:b6:da:47:37:cb:22:36:31:7f:
70:ad:af:fd:db:b5:cc:da:94:d5:89:14:ce:57:1b:75:48:7a:
06:0d:3d:8d:83:9e:a2:72:62:f5:60:cf:ac:e2:26:54:93:75:
c1:53:44:06:0a:e0:e5:d2:4c:f8:fc:30:a4:60:7d:d2:d8:e6:
05:3e:62:af:2f:5c:cf:ca:3e:db:4a:82:21:01:31:94:62:6f:
88:8d:d8:fd:0e:7b:7c:8c:bc:4f:62:ec:36:d0:2a:5b:41:f0:
cd:8a:07:59:d0:eb:be:cf:63:6c:31:5d:de:69:e4:03:66:e3:
8a:85:7a:05:8d:cc:27:f3:e5:f1:f4:df:08:a2:5b:f1:a7:ae:
64:95:ca:16:74:50:11:b6:37:14:b4:78:ad:42:9f:7c:e9:19:
37:ad:12:27:e5:5a:a0:11:a0:1a:c0:38:36:b7:04:86:2f:47:
d2:4a:03:44:5f:5b:fa:7f:d3:b2:df:c2:63:c4:e2:9a:29:29:
24:58:38:55:c3:6a:cc:85:bf:b0:b4:26:4f:b3:d8:3d:13:69:
3a:18:2a:af:71:8a:5a:da:71:87:fe:24:4d:8e:9b:45:83:be:
76:53:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:03 2025 by rpki-client