Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: U/yPkTplMaW6PI7Tv/sipm41qL3HAP7NEm7v6CXt45w=
Subject key identifier: FA:7E:EA:95:C8:C1:2A:9D:BB:7B:51:E2:BC:E4:0C:38:92:37:BD:BD
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0197BB900700CFF3175507F9BB1CAC4C7D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0D1E
Signing time: Sun 29 Jun 2025 12:01:07 +0000
Manifest this update: Sun 29 Jun 2025 12:01:07 +0000
Manifest next update: Mon 30 Jun 2025 12:01:07 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: b5ET2wewCDEDiMgIuFqcBETd6D59GDG9hZ5UupR4X2k=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:07:00:cf:f3:17:55:07:f9:bb:1c:ac:4c:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jun 29 12:01:07 2025 GMT
Not After : Jun 30 12:01:07 2025 GMT
Subject: CN=fa7eea95c8c12a9dbb7b51e2bce40c389237bdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:7a:dd:7f:82:8c:f1:2c:69:2a:08:31:35:
57:0f:8d:b1:85:8f:b8:ad:c0:68:1c:41:7b:60:b6:
3d:45:da:4f:b6:e8:48:e5:b3:61:3a:e5:98:cb:92:
b7:e5:bb:8e:f3:a5:34:0c:5b:f1:60:e2:b2:e8:a9:
4e:2b:c1:5e:97:43:47:14:0a:e3:5c:f0:b7:56:46:
9b:e7:8b:c9:68:14:88:46:63:67:f2:b2:1f:71:14:
25:e3:46:a7:42:41:33:0c:6d:3e:5f:be:9c:c4:80:
6d:31:1d:b0:0b:1a:a1:4a:a5:bf:f4:9a:4b:7a:df:
e2:02:33:83:ef:24:20:92:92:24:d5:cb:9e:ca:bd:
58:54:dc:dc:78:7b:e7:6d:8d:07:70:d1:d5:16:20:
0a:13:50:c6:75:46:5a:f2:b9:c7:b5:9f:2d:74:6c:
c5:ac:c9:3a:b4:6a:38:fa:69:a8:94:64:7f:34:52:
99:ab:b3:e1:10:42:bf:ab:89:4b:22:bf:15:7e:13:
10:10:d8:0a:ce:fe:ad:0c:c3:2d:07:85:81:1b:9f:
36:06:e5:af:d8:cd:9c:9d:e4:f7:21:52:d5:97:f8:
79:3e:77:10:9f:d4:9d:b5:6c:ea:cb:f6:e0:b4:55:
0b:12:f6:92:41:f4:8b:69:75:01:6a:fc:7f:0a:c3:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:EA:95:C8:C1:2A:9D:BB:7B:51:E2:BC:E4:0C:38:92:37:BD:BD
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:10:4e:c9:30:69:f0:e0:3f:34:77:15:9b:0d:96:1e:18:
8e:5e:95:71:bf:a5:6c:d6:2e:9b:4e:ed:d8:bd:06:3e:e3:88:
0e:26:44:ce:cf:ed:17:09:5c:a1:91:ac:5c:ee:22:d0:b7:5d:
16:bc:f8:93:74:4a:fc:30:b7:2a:4a:db:d8:3a:80:1f:61:8b:
d8:b0:ee:9c:2b:93:c6:c5:de:98:05:e5:cf:03:af:1d:e2:a9:
62:1b:83:6f:f7:93:3e:24:e1:25:98:f2:24:43:5c:64:56:78:
b4:c7:7b:30:94:c3:81:2a:c0:27:44:bc:86:87:dd:0c:38:90:
25:c4:e7:65:89:11:35:2a:7b:59:1d:67:d2:37:f4:97:6c:84:
38:42:89:66:ae:32:2c:e3:ba:d0:27:1e:88:34:ad:cd:0d:d2:
4f:4b:03:94:4a:79:b6:78:85:7f:4f:57:0c:b8:2f:2e:cb:62:
71:ba:eb:dd:b8:86:a2:b8:25:ac:c5:99:85:4c:6f:df:b6:1e:
98:ee:e9:db:99:c4:aa:25:08:46:a7:c2:36:51:9e:8d:85:00:
a1:22:b9:5a:67:18:6c:39:3b:a7:ce:78:bc:b7:be:0c:d8:f0:
d4:4a:1f:79:6a:c8:1c:2a:ef:2e:4e:c5:ca:62:a3:71:95:a7:
77:34:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:56 2025 by rpki-client