Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: eZW/SJJpC+aJfFGcqrT+uew7tCyg4ZTKg4TiRRrJUck=
Subject key identifier: FC:4F:EE:1E:2C:F8:27:2E:28:43:3E:43:72:14:52:FB:18:9F:D9:E5
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0197B7B31214B1189262F3D613E8C5758626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0C45
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: QDD1xKEum1EnOw0sY61WlVVuSx8eBJbgNryALv+RGJE=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:12:14:b1:18:92:62:f3:d6:13:e8:c5:75:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=fc4fee1e2cf8272e28433e43721452fb189fd9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:53:24:69:56:0b:f9:30:01:05:99:0c:bd:
0d:a2:33:b8:9e:c9:61:0c:f9:fd:01:5e:17:b8:72:
bf:2a:e3:24:84:df:cf:2f:a0:15:18:51:b3:52:74:
8c:17:c4:ac:53:7a:b7:4c:fc:92:c7:a2:68:d3:0f:
dd:81:51:69:92:7d:e6:e7:26:f8:31:1e:3d:78:14:
fc:a9:45:a8:c9:42:60:df:21:47:9a:ad:68:8f:3b:
de:02:9f:fa:f6:78:15:07:b2:9f:70:78:71:b2:f4:
16:b3:3b:52:fb:1e:56:f9:b2:70:3a:a4:f7:78:50:
08:58:30:d7:9c:f3:dc:64:77:7e:46:64:cd:ee:d0:
84:4d:ed:22:ca:16:f7:b4:30:93:95:15:82:bf:b3:
76:3c:a3:bb:a0:db:6a:56:b5:64:05:1d:d2:75:68:
36:33:cb:4c:35:13:84:92:46:cf:fc:fa:58:f3:fb:
32:26:87:a5:38:fa:bb:4f:72:f7:76:f6:67:47:1a:
81:dd:9c:3b:84:45:95:f4:4e:6a:55:c1:ea:8f:c2:
44:20:34:13:f5:2f:78:37:29:b6:2e:14:43:32:34:
f0:9c:65:c7:87:e4:28:6d:26:74:7e:05:1a:77:66:
94:bb:4a:d6:1b:5b:33:e3:75:b7:ce:b4:55:76:2a:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:EE:1E:2C:F8:27:2E:28:43:3E:43:72:14:52:FB:18:9F:D9:E5
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:01:f6:60:f8:b2:d6:76:7c:4e:3b:bb:dc:5a:5b:33:85:
72:53:12:d5:31:a2:c5:01:73:a9:7d:91:47:3f:7f:ef:41:d6:
9c:87:81:86:ff:03:8a:b6:05:55:22:e0:1e:37:39:fd:21:ca:
5e:67:a4:ce:68:df:04:62:7f:3a:c2:c2:34:fa:bf:3d:bc:11:
99:78:11:ac:50:d9:bb:92:14:25:1d:31:7a:90:39:90:30:ec:
8a:2f:21:da:cb:29:4b:86:f5:89:0c:3a:bc:58:f8:f7:0b:97:
f3:1d:a2:14:c2:86:d9:26:64:7b:f3:0e:d1:2f:94:65:35:9c:
e2:f2:18:97:a7:2a:b9:94:98:71:09:46:c8:17:fa:9d:cf:2d:
19:35:e9:b2:47:31:29:21:de:76:1e:5c:dd:c9:3f:08:1b:6b:
98:ab:b8:a9:69:d8:54:0d:f4:3a:52:35:04:b7:d1:27:40:40:
09:fe:06:6a:0a:e9:11:40:ad:9f:83:c7:9d:42:b8:76:5e:53:
ab:68:bf:2f:37:8b:06:ad:9b:59:af:ac:34:bd:0d:8d:7a:dd:
7d:c7:0a:65:7a:6a:fd:02:14:e5:07:82:1e:96:87:7f:ae:ea:
ef:9c:fa:92:41:a4:bb:b5:f2:8b:e2:73:2f:3e:48:1d:7c:6a:
a0:ec:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:59 2025 by rpki-client