Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: yhTXUiUuuBv9JqK4uqwnEVjGDcOfIzErpsz9m4VxSWI=
Subject key identifier: 48:D8:12:0D:0E:87:07:F2:95:C4:83:DE:73:F0:0B:E1:5D:E0:79:84
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 0197B8FD5937F159596A50858364810B05C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 0599
Signing time: Sun 29 Jun 2025 00:01:40 +0000
Manifest this update: Sun 29 Jun 2025 00:01:40 +0000
Manifest next update: Mon 30 Jun 2025 00:01:40 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: B5UrUz4tDjjK2uHPPsjHmUQv4JBgzo9tpS2vb0rZkzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:59:37:f1:59:59:6a:50:85:83:64:81:0b:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Jun 29 00:01:40 2025 GMT
Not After : Jun 30 00:01:40 2025 GMT
Subject: CN=48d8120d0e8707f295c483de73f00be15de07984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:a9:38:50:79:6d:47:df:6e:11:a9:f1:1a:
b3:db:26:d4:31:1e:ba:a0:3d:b4:83:44:47:59:a5:
95:62:43:47:77:64:03:ef:1d:b4:4b:f6:ee:49:e7:
23:f7:75:9a:e0:99:1b:2b:4a:82:9c:4b:c9:41:b2:
ac:90:1b:71:33:72:97:45:c4:e8:9c:f2:e4:c1:c5:
7c:9d:c4:91:3d:d6:6d:4a:0b:a3:9f:76:b4:db:9b:
db:3b:bc:86:8e:ae:bf:dd:b5:9f:e9:a5:00:9d:b7:
f1:62:9d:09:82:7a:11:b0:25:d6:59:c1:b5:59:23:
cb:13:07:3d:d3:89:37:6a:28:32:71:ac:9b:3e:89:
28:e6:5b:8a:de:75:6e:58:2a:88:f5:23:5d:f3:2d:
5f:84:77:c9:fc:ca:51:bf:af:5d:6c:36:63:d6:ec:
14:a7:ae:60:8e:b5:c8:19:a2:b0:0e:36:de:58:1e:
09:ea:af:58:96:c8:d3:75:99:59:65:62:72:2c:2d:
12:36:1a:f1:14:53:1f:66:10:5e:64:38:55:e2:6f:
db:4e:2f:6b:cc:79:b5:e7:72:49:4f:85:64:9a:40:
be:fe:7d:c5:2c:1d:79:97:ba:77:b6:00:5d:63:4a:
a0:f2:fc:16:25:1f:ac:5c:fa:4f:d5:f4:b6:a8:1c:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:12:0D:0E:87:07:F2:95:C4:83:DE:73:F0:0B:E1:5D:E0:79:84
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:41:78:10:6c:69:86:a0:e5:fe:49:7e:cb:9d:de:a8:17:
ce:51:cc:27:2c:77:a6:d2:bf:1d:01:ae:12:72:2c:89:44:6b:
47:4b:a2:97:94:d5:33:36:b8:88:62:d8:ec:1d:ee:ba:42:18:
c5:87:aa:30:0a:8e:2d:5a:ed:22:34:5a:b7:18:06:83:0d:fe:
de:0c:7e:b2:cc:ae:c5:53:01:e6:e0:d7:06:d4:57:a7:2c:a6:
6e:d0:55:8c:4a:24:a7:0f:d2:b1:f7:0f:73:ad:6b:57:82:1f:
fd:72:c8:7f:37:b1:62:24:87:66:c5:64:ea:8e:af:9d:68:a4:
86:06:25:eb:c7:29:8b:0a:5f:0d:20:97:ec:17:16:06:02:2a:
2f:28:98:34:1f:c8:6d:65:a0:81:2c:58:13:76:af:86:d8:04:
3f:61:12:04:68:05:59:58:da:5d:8a:c8:39:40:07:2a:41:59:
91:26:8c:d0:ec:f9:6d:05:6f:16:d2:b1:ab:39:dc:25:1b:fc:
c6:c4:91:11:52:6e:da:de:d6:c8:76:6c:f2:5b:52:01:45:59:
7c:ed:eb:cd:78:03:e1:22:1d:73:ba:18:d4:e3:92:7c:0b:71:
ee:9d:52:8c:35:01:b7:41:05:7d:90:18:5a:82:fb:84:0e:3a:
e7:cf:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:59:16 2025 by rpki-client