Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: 5c6mqu1VNsRH922w9alSrKeNoRnf0BS4N403OeLCdVY=
Subject key identifier: EF:5F:E8:55:B1:8E:34:44:29:BB:E9:51:21:24:57:E7:6C:A0:5D:3F
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 0197B632AA468B3C45BB5FD5909C4334D453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: 8a1owFIO4Il5WLLbZ7f+ZJzE+dgcZ0Ge3UHM7aWSnIM=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:aa:46:8b:3c:45:bb:5f:d5:90:9c:43:34:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=ef5fe855b18e344429bbe951212457e76ca05d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:ed:c5:62:0b:08:2a:bd:7c:a1:f2:aa:07:
20:0e:d5:9e:84:b7:f8:9e:7d:65:06:0d:9c:a3:84:
19:dd:8a:80:c1:d0:c6:41:96:5c:05:b6:41:5d:ed:
fc:67:3a:33:0c:2d:d3:47:03:cb:eb:c0:e1:82:05:
e6:fd:ce:d6:24:2f:05:a4:0b:08:8c:4e:11:df:eb:
eb:29:1a:fb:3f:61:48:43:41:1c:7e:b6:8a:9b:5f:
cf:e0:40:0b:ef:ba:18:b2:8d:80:61:05:0a:ec:1b:
1f:78:0f:c4:f2:89:04:ec:cb:da:a5:64:22:e3:4a:
45:58:08:18:7d:70:2c:1f:6f:66:52:de:d0:86:22:
15:46:54:8c:c9:44:c5:f0:ff:49:df:f6:f8:48:22:
9f:ac:e7:0a:58:04:2c:02:7e:56:dc:4a:e5:fe:48:
45:43:20:53:f1:de:7b:f5:68:db:f6:55:73:0e:1d:
bd:ee:e9:14:1b:e7:9e:c1:c3:66:0d:3d:ef:fd:0c:
f5:08:ac:01:f0:aa:d2:c5:0b:5c:b4:04:87:da:42:
ea:ef:2e:c4:0f:f2:48:94:28:f2:16:6d:08:25:07:
87:77:5d:5f:3e:ef:3b:8f:8b:32:dd:22:c4:cd:8c:
78:48:8b:21:73:81:f6:c9:09:06:c6:35:8e:c0:fe:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:E8:55:B1:8E:34:44:29:BB:E9:51:21:24:57:E7:6C:A0:5D:3F
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:d8:bc:8a:87:cb:7f:8b:76:a1:49:0a:16:66:35:9f:16:
a6:a2:b6:92:de:49:ff:08:61:46:3f:af:8d:1c:0e:75:f5:7e:
2c:90:18:f4:91:4d:88:83:cc:46:55:03:dd:40:c9:e6:e8:c1:
f9:59:58:7e:04:b5:a4:f3:91:f3:b6:44:52:51:16:52:17:95:
97:c0:ee:66:a6:e2:75:55:e9:77:55:25:e1:d0:e7:df:dd:31:
85:35:a8:b4:e8:8d:39:e8:73:37:00:94:ec:ab:0c:79:c8:0b:
d6:43:d3:36:a9:4e:23:a1:cf:9e:67:14:f3:f4:22:e2:b1:35:
d5:c7:c4:cf:f7:bd:c3:b8:fc:16:b9:ca:e9:5d:2a:03:d1:e6:
87:3d:9a:91:24:fc:59:98:ef:d2:c5:7f:ef:8a:49:f5:87:97:
18:b4:75:ef:b6:d5:d1:9a:bc:4d:20:bb:47:df:d9:9e:3c:d4:
1b:57:d8:5b:5a:5e:bd:03:de:7b:bf:38:3d:16:5d:58:53:4f:
cf:3d:1b:ac:54:f1:63:ce:50:d1:e1:1e:e0:b2:b6:e0:01:a6:
54:8a:41:0c:e4:a2:ad:43:f8:a2:71:00:aa:90:f1:f5:a7:eb:
e2:ff:ca:e4:bb:18:1b:27:f3:c6:2a:ae:5b:15:03:4a:17:ef:
e3:d4:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:56 2025 by rpki-client