Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: ML5c2ZkXmxWSpw98dMoqluTocg4QJB1lud20i7o2t2Y=
Subject key identifier: 0C:B6:62:2A:A7:D6:FD:16:59:19:A1:8B:18:8C:EC:7F:BD:1D:8C:7B
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0197B8C5D786F5EACAF204BF82878DFA3BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 23:01:02 +0000
Manifest this update: Sat 28 Jun 2025 23:01:02 +0000
Manifest next update: Sun 29 Jun 2025 23:01:02 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: FFfeHCGioF2nKQTuDQK0w0LxDeLYsTAYxZV69SCV9b0=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d7:86:f5:ea:ca:f2:04:bf:82:87:8d:fa:3b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jun 28 23:01:02 2025 GMT
Not After : Jun 29 23:01:02 2025 GMT
Subject: CN=0cb6622aa7d6fd165919a18b188cec7fbd1d8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:b4:33:41:85:07:69:0d:66:8a:43:9b:33:
09:c1:56:15:ec:81:9e:84:5d:96:54:44:ee:be:86:
76:97:06:22:c0:96:ab:08:a4:00:a9:ce:ab:68:f6:
18:c7:68:6d:18:c4:9c:c5:02:af:67:b3:f4:e9:ae:
32:b6:52:ef:75:69:96:b7:75:ab:ae:42:ec:7c:0c:
1a:ac:05:6e:8b:40:76:fe:74:3e:91:35:50:23:7f:
cf:01:18:b9:8a:c0:3b:f8:f8:ff:b0:4e:12:2f:63:
f7:06:40:6e:f2:b6:d7:9b:ac:d7:a2:f1:e4:53:3b:
fe:e4:25:95:b9:4b:a0:5e:36:23:c4:6d:f7:4e:46:
82:24:07:1a:ee:31:f3:18:38:92:1c:b1:1e:41:83:
7e:ab:c2:5d:25:03:05:e6:83:0f:97:78:52:a8:2f:
36:62:3a:fa:d0:61:b9:be:f6:e4:e6:cf:c9:25:f7:
85:5a:51:2b:a5:ac:dc:af:c9:cb:10:9e:ca:ad:d8:
08:85:bc:96:e2:89:ed:7a:89:bf:fe:1b:ff:df:ea:
0a:58:f0:29:d2:77:e8:ee:fd:ad:c8:2b:53:b3:d2:
fb:f6:91:92:17:22:c0:2f:f5:b8:68:15:66:9f:01:
7b:33:4e:2d:60:ae:89:76:fc:04:17:17:3d:23:46:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:62:2A:A7:D6:FD:16:59:19:A1:8B:18:8C:EC:7F:BD:1D:8C:7B
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:5f:75:7f:58:18:92:3f:54:37:87:8f:a1:8e:0b:99:18:
09:1c:f9:f3:55:4d:41:87:c0:91:4d:fc:5a:5b:c1:94:2d:f3:
09:b4:17:ff:9d:08:cf:a5:59:ff:46:0d:54:16:4c:78:93:44:
83:8b:ac:50:1c:17:0d:89:35:87:88:86:b7:b9:c4:2e:ac:28:
10:08:3e:c9:dd:88:2e:8b:ee:67:ca:cc:b7:a5:3d:1f:a8:5a:
79:45:9f:ce:e2:da:9f:d6:db:9c:ca:01:b5:3c:36:fb:ea:09:
33:ae:77:17:0b:9d:6b:46:5c:95:90:63:81:af:96:50:15:f5:
67:e7:4b:2b:8d:e5:1b:7e:5f:fd:a0:b0:09:7c:20:89:01:49:
02:78:32:02:72:6f:c7:86:8e:33:63:27:9d:f2:e5:9f:8a:81:
e6:70:d0:c4:77:bf:73:12:22:0d:b7:ea:fa:de:1a:b6:f4:15:
0c:01:17:ce:44:31:56:68:f6:07:09:01:2e:b5:be:8a:5c:11:
a9:fd:cb:71:45:98:e4:96:4a:aa:c0:77:b3:82:ad:db:e7:c7:
4d:33:bb:37:25:cc:f7:d8:de:15:16:56:2d:12:35:77:86:65:
1a:6f:43:a8:29:58:09:b3:4a:27:1f:f5:28:37:0a:41:df:c8:
08:ea:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:54 2025 by rpki-client