Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: rb+vpaKIEWWhtDC1ekK6gzrLm4tlJJCPnYqikpCW06w=
Subject key identifier: 7A:8B:0A:7D:BF:60:26:1D:FA:FA:8E:82:82:15:C2:40:B0:00:AB:84
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 0197B6A1D6162462D6D5D044549C60C56EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: y/X71AzwrzHjs+/AzSS4xlTMsCqxTHvHDNDBddWwlGI=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d6:16:24:62:d6:d5:d0:44:54:9c:60:c5:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=7a8b0a7dbf60261dfafa8e828215c240b000ab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:72:ea:21:89:e2:a8:7f:9b:49:7b:b2:7a:
d1:9a:83:1f:ce:6e:df:6f:fd:a8:0b:4b:50:11:27:
e5:1e:42:b5:36:8e:18:60:9c:d5:9a:c8:ba:27:0d:
b9:37:5a:54:be:78:9b:c7:6d:5b:fb:4d:1a:f5:6c:
e9:c2:8b:9d:b5:95:1d:93:40:92:3a:92:fc:dc:ab:
74:10:f3:8b:fb:58:ed:11:28:80:9c:fd:a0:10:3a:
6c:3f:fa:b8:91:66:da:0f:55:ad:e9:ce:40:a0:a7:
29:95:f5:78:eb:6d:be:42:d9:57:8a:8f:22:e1:83:
9d:99:ea:6e:d9:a0:58:94:11:99:a6:77:e4:10:96:
55:b4:f0:ea:53:22:55:f4:53:9a:21:5d:f2:45:b9:
8d:a2:d1:5e:da:81:65:9d:ae:71:8a:ff:92:78:70:
44:99:d6:9c:6a:6c:1f:12:58:0b:fd:b0:89:e0:9d:
8b:1d:39:f6:da:b3:dc:68:d6:a7:31:5f:ab:3d:0a:
6f:53:25:9f:3e:b4:b7:a6:ff:fb:40:72:e6:bd:c4:
c7:b3:cf:e8:34:c1:97:88:d6:63:2a:3d:a4:d9:ec:
67:a4:23:bd:7c:1b:63:e9:03:d1:fc:36:ab:d5:ef:
13:02:6a:27:d5:ae:a9:16:e8:e8:29:f1:52:6a:de:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:0A:7D:BF:60:26:1D:FA:FA:8E:82:82:15:C2:40:B0:00:AB:84
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d9:f7:92:e6:7e:50:35:ed:2c:ee:3d:ef:be:0e:09:34:8f:
28:b8:d3:33:ad:e6:00:2a:33:54:65:44:a1:14:6f:38:1a:69:
6e:95:6d:d0:1f:c9:e0:6c:78:b9:d1:29:16:ed:01:d8:44:a2:
15:73:fb:83:a0:98:04:25:8e:cf:ee:3e:e5:b0:68:0f:ed:f1:
e0:ae:a3:4a:1e:ce:b2:8a:1b:e2:d6:35:c5:dd:e6:ac:ae:11:
8f:46:ff:a6:bd:06:b7:0e:d2:44:9b:20:e4:f7:39:f7:ce:9b:
27:9c:a5:c8:d8:91:00:85:10:ce:99:1d:22:41:c3:fe:f2:44:
49:04:13:b0:86:e6:06:04:f1:4c:94:e8:77:c7:5e:f6:02:68:
74:f0:5b:ae:86:fa:c1:93:94:c5:24:63:f9:04:cf:3b:7b:86:
47:13:96:90:df:b1:40:a2:f4:5f:d1:4b:3a:7b:8a:b1:68:e2:
5b:9d:84:8c:48:df:3d:75:cb:c5:84:08:16:45:45:6f:c2:d0:
87:c3:b9:eb:f2:68:5e:13:ed:3d:9e:6f:5a:f8:23:99:8a:79:
cb:6a:51:da:e2:87:7d:c7:75:16:b7:ea:db:f0:f2:c2:bc:b4:
52:16:07:ca:17:ec:ec:c5:99:b3:16:c1:92:70:41:c1:7b:3d:
0a:a0:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:33 2025 by rpki-client