Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: lK6bvCHIrZjRlhpvAlaccihMrRv+5v+XkcsXg8zPm9c=
Subject key identifier: 21:40:58:B0:A0:92:16:13:68:35:2B:31:34:12:3F:1B:5D:1A:F4:4F
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 0197B745C043433908E0D6EDE0D15BF352B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:31 +0000
Manifest this update: Sat 28 Jun 2025 16:01:31 +0000
Manifest next update: Sun 29 Jun 2025 16:01:31 +0000
Files and hashes: 1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: enx7qJ7ECZKb+chQhqlGqfGNAprQdWcsz630WYP+T1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:c0:43:43:39:08:e0:d6:ed:e0:d1:5b:f3:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jun 28 16:01:31 2025 GMT
Not After : Jun 29 16:01:31 2025 GMT
Subject: CN=214058b0a092161368352b3134123f1b5d1af44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:c8:f6:6e:55:d0:1d:df:b9:64:33:dc:ff:
05:e0:3b:ce:2b:16:c6:72:69:85:52:4d:86:84:b2:
dc:84:2c:df:9d:ec:cb:af:be:53:40:ec:3d:39:25:
bb:d3:16:10:8f:71:97:8b:00:d1:2b:6d:84:c8:6b:
a9:f2:39:cc:a6:50:47:de:2d:7f:d6:31:f3:0c:70:
d5:d8:59:43:c6:e2:e4:3f:51:ac:ab:0c:9e:a1:96:
af:94:03:c0:d6:5e:f2:49:5e:d1:8f:19:ce:e3:8a:
60:63:b1:dd:11:dc:a7:a9:02:51:11:e9:2b:9b:dc:
5a:84:d4:89:a8:bf:01:8b:cd:6b:83:47:52:35:9f:
90:14:c2:8e:36:95:1b:4a:53:d6:00:16:d6:a6:f0:
ee:27:19:63:f2:8d:ee:f2:ba:f5:73:02:4b:4a:12:
7d:c1:d2:88:32:c0:93:b7:50:08:af:2d:97:eb:26:
7a:83:f2:f5:c7:81:6f:0c:a2:b0:d5:72:3a:0d:0e:
f6:09:41:a4:97:10:af:1c:37:80:65:ec:d2:cf:57:
48:90:b4:48:1e:6c:4f:24:44:64:4e:46:8f:1b:07:
d5:e4:da:31:45:ec:ab:90:4f:69:e7:91:0c:74:6c:
05:b3:d8:c2:1c:38:64:48:a9:1f:03:47:70:b9:fa:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:58:B0:A0:92:16:13:68:35:2B:31:34:12:3F:1B:5D:1A:F4:4F
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:54:ef:53:a6:78:77:c5:fe:b4:d9:52:d0:63:23:d2:c8:9d:
76:49:71:1c:a2:4c:d4:cf:3b:87:32:a3:63:5d:5b:5a:7e:bb:
0f:09:b1:d3:3b:5b:40:78:31:72:f2:b3:d9:9c:df:27:bd:51:
2a:5f:b5:c7:d8:18:bd:35:d9:a5:17:cb:8f:a4:de:42:46:b2:
dd:64:6d:27:66:98:2c:29:fc:b5:8c:ff:95:bf:4c:72:6d:cb:
bf:10:d8:2c:68:87:95:00:34:13:d2:ca:36:83:f2:43:1e:8d:
05:e0:03:4d:b8:31:c1:bf:a0:db:ae:e2:4f:8e:e5:31:99:62:
a7:72:0c:62:9e:e1:7a:f8:93:86:89:e3:28:02:6e:44:a5:66:
10:c8:f1:62:ef:a2:74:b2:39:ea:aa:8e:33:4a:c2:ad:be:9a:
13:ef:02:49:e6:20:00:68:e9:82:d4:cd:82:a0:66:3a:7d:0a:
59:3b:67:94:89:12:6c:c2:5d:48:0d:b9:f1:c4:21:c9:bf:f6:
41:ac:7b:e6:79:ea:1d:a7:aa:7b:0f:de:2c:31:b6:3c:a0:dd:
78:80:d1:80:3b:d4:9f:f6:db:e7:3d:5b:b7:f3:d5:b7:68:29:
30:ba:e9:0f:4b:dd:af:e6:62:a3:c3:8a:8e:0d:a2:a4:3f:50:
78:c4:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:41 2025 by rpki-client