Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: 19hPzT39+Jivj7kOLUV2nsBpcz4KA+qlpavRDCu329I=
Subject key identifier: 12:B7:E7:F3:90:2B:0F:E0:34:EC:85:CE:F9:E8:51:CE:97:57:7E:F8
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0197B8C5E1DF48F1F1FC6C8D8F249150753F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 029A
Signing time: Sat 28 Jun 2025 23:01:05 +0000
Manifest this update: Sat 28 Jun 2025 23:01:05 +0000
Manifest next update: Sun 29 Jun 2025 23:01:05 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: okvQJ5Cc9c1fLvcacanVV8BFSYlFbegDyeFwcvIzwD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e1:df:48:f1:f1:fc:6c:8d:8f:24:91:50:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jun 28 23:01:05 2025 GMT
Not After : Jun 29 23:01:05 2025 GMT
Subject: CN=12b7e7f3902b0fe034ec85cef9e851ce97577ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:e8:71:f2:25:36:fc:2d:cd:9c:f3:01:e0:
e5:ab:4a:c1:df:7c:d9:c2:ba:10:ff:7e:b3:3a:45:
44:13:3f:aa:bd:e9:c9:cb:f3:80:5b:33:77:b1:83:
cd:0c:c2:30:20:14:87:11:3b:b1:9e:c3:74:1d:fc:
3f:c5:4c:97:ae:64:87:98:e6:e0:d8:c3:a8:36:e5:
95:38:cf:1a:23:fc:bb:a9:54:47:3b:c1:48:91:9c:
37:39:e9:3c:6f:25:ec:74:42:9b:c7:d4:bb:44:03:
a4:d4:ef:72:7c:f5:74:0b:dc:11:b4:f8:dd:5e:bb:
31:dc:01:19:02:b0:97:a3:fe:74:0b:9c:e8:05:62:
f2:be:a8:87:6b:60:cf:2d:6b:5d:20:b1:d7:41:58:
96:55:7f:f7:0e:f6:83:86:08:07:66:77:87:40:59:
c9:e5:d9:87:8b:19:48:cf:13:ab:56:74:76:15:cb:
93:6f:44:e3:5e:e4:a8:ff:6b:f9:61:1c:61:4e:85:
e9:12:41:ba:6b:ee:b4:f5:58:1c:40:8b:db:98:cd:
6d:88:b8:40:7a:74:1d:c3:6d:83:95:92:d9:7d:4c:
ee:52:b2:2d:d6:35:54:c0:7b:bd:73:70:4c:df:2d:
ff:2e:67:47:50:d6:bb:68:21:59:07:b5:c3:53:96:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:E7:F3:90:2B:0F:E0:34:EC:85:CE:F9:E8:51:CE:97:57:7E:F8
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:be:28:15:d3:2f:90:4f:3d:88:89:c4:1e:52:dd:f7:43:
f6:59:11:51:06:37:93:72:cc:76:21:34:55:68:3e:fa:6a:61:
20:2e:e3:37:1b:b8:89:9f:44:ae:49:fd:4b:35:46:c9:e5:b2:
39:7f:79:79:1c:ff:64:45:b5:72:3c:74:0d:a0:f6:dc:b3:d8:
83:a2:cd:c6:f4:43:e3:2f:90:2f:88:54:11:0a:da:fd:ce:e1:
cd:8c:04:6f:7e:96:cd:a9:22:22:c9:b4:7e:82:9c:be:f9:05:
e8:5c:37:b1:3a:36:ab:4e:35:a5:49:09:a4:51:af:a9:1b:11:
dc:3e:cd:60:11:64:f5:0f:3e:47:da:f0:f2:cb:80:5e:d5:ed:
1a:89:c0:9e:a9:03:03:3f:32:2a:0a:59:01:51:e3:cd:c9:42:
c2:58:a5:9c:54:2f:d9:63:f2:7f:63:9e:07:35:2c:1a:fc:78:
0a:a0:df:f3:94:1a:6a:3a:95:d0:9b:80:60:a5:e7:89:60:f2:
25:e1:54:32:94:85:0e:f9:3d:93:e3:ee:c3:5f:22:ce:ca:41:
d3:bd:f3:90:e2:a7:b5:bd:aa:cc:2b:e4:13:8f:4d:4a:2b:42:
b5:71:68:ab:00:a3:e3:98:05:60:78:b0:30:13:16:7e:0d:e3:
ed:ad:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:10 2025 by rpki-client