Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: E7LVHTUpcKbc3KOsqOMMfR+JnpzAmUyzkXgNCr7FdTM=
Subject key identifier: 2A:40:B9:0D:8D:FC:E8:0B:8E:67:99:17:FE:9F:18:42:B0:66:DD:17
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 01977A1D95B2045D1E46F9B4EFE1F53518DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 19:00:48 +0000
Manifest this update: Mon 16 Jun 2025 19:00:48 +0000
Manifest next update: Tue 17 Jun 2025 19:00:48 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: /zeVBFVGJWPxBKbBU+1rHwYLYLda3WG98YXcJf+sNpE=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:95:b2:04:5d:1e:46:f9:b4:ef:e1:f5:35:18:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jun 16 19:00:48 2025 GMT
Not After : Jun 17 19:00:48 2025 GMT
Subject: CN=2a40b90d8dfce80b8e679917fe9f1842b066dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:10:65:7d:a6:29:37:c1:74:9b:01:4b:fe:
12:de:48:52:6c:89:dd:d2:04:20:8f:55:05:d7:b7:
8d:d4:5d:27:10:4d:40:4f:94:94:5a:51:0f:bf:b2:
8b:f5:18:4e:30:ce:9e:1c:9a:19:f5:b5:17:42:ff:
24:98:21:3d:02:eb:ab:c9:0b:33:d0:4f:34:88:19:
06:fb:59:88:ae:af:7e:14:c2:f3:09:63:75:b7:2a:
87:d0:4a:9c:56:e3:56:5c:37:a3:fe:4a:db:1c:d4:
c8:96:9a:6e:18:d8:1d:6a:66:a4:5d:55:b3:20:14:
0b:c7:d5:77:50:d6:4d:9d:1e:66:8c:05:1b:fb:eb:
c2:8b:33:3d:0c:7a:08:a2:26:3d:06:f9:1e:97:a5:
ce:89:46:d1:d8:24:aa:93:7d:f8:7e:75:68:47:0f:
63:fd:dd:81:d3:fa:f5:ca:a1:f9:50:8a:fb:1b:ad:
b2:5e:c5:c7:ea:6e:c7:a3:60:a7:9b:71:e3:2d:3d:
b5:e7:67:fb:c0:ce:65:2f:ce:31:2d:6d:ec:36:0c:
51:f0:f0:37:b1:2c:66:b7:6d:5b:44:ab:4f:af:eb:
00:7b:cb:84:bf:a1:6b:88:e4:1e:72:ce:fb:fd:b2:
3f:cb:e1:99:21:e8:5b:82:2c:da:22:a7:50:b6:db:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:B9:0D:8D:FC:E8:0B:8E:67:99:17:FE:9F:18:42:B0:66:DD:17
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:7e:14:0d:39:35:e0:b8:14:49:19:c8:ca:8b:cc:88:0d:
8a:d1:87:34:25:61:d3:b9:33:8a:52:1c:79:e5:d6:95:21:bb:
68:18:16:c5:5c:f3:ef:d8:33:4d:79:36:7d:6a:7a:5f:0d:5c:
be:cb:9d:4e:52:32:bd:23:3a:96:c0:14:84:99:2a:38:57:7c:
79:28:92:1a:fd:13:45:68:fc:64:be:92:f6:85:b4:6c:56:33:
53:a6:55:4d:69:79:7a:db:16:2d:ca:64:ed:e3:e5:24:5d:b5:
20:37:c4:0b:f3:a8:c4:0a:cf:25:e2:89:a7:12:b9:2a:e6:c9:
5c:ad:60:46:58:88:62:f5:bc:2b:91:c0:92:52:f9:f2:a2:e4:
d8:1d:28:92:3f:db:9e:01:1a:97:eb:5f:9b:7d:5a:90:34:e0:
55:4b:22:aa:91:f0:c7:c3:47:c8:a1:c9:96:23:49:f2:61:14:
e9:a3:e0:f8:4d:3e:1d:f5:b7:66:cd:e2:00:51:60:92:4e:1d:
15:63:9a:a1:10:51:bf:fd:93:d4:0c:90:de:40:e1:a9:ad:e9:
47:90:34:6a:91:1c:d6:97:1b:4a:61:3b:19:f4:94:3f:35:8d:
d6:86:7e:0c:f5:d5:26:32:5a:8e:29:5d:19:8d:85:89:48:6d:
5a:b7:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:10:04 2025 by rpki-client