Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: W+CJ1002uh0X9J8LWKxVym0jD72PDJp9VWiIMrUjkEk=
Subject key identifier: 18:C5:5B:79:49:86:07:9B:DB:7E:E9:BE:33:2B:A0:68:28:68:B0:5A
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0197838E6A78C513A70C3EC211D213B29DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 15:00:38 +0000
Manifest this update: Wed 18 Jun 2025 15:00:38 +0000
Manifest next update: Thu 19 Jun 2025 15:00:38 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: gVcAH1WkCR6EQ9n2G0DLRChWhQ02oAFqj+arHEOlIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:6a:78:c5:13:a7:0c:3e:c2:11:d2:13:b2:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jun 18 15:00:38 2025 GMT
Not After : Jun 19 15:00:38 2025 GMT
Subject: CN=18c55b794986079bdb7ee9be332ba0682868b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:22:2b:d6:e3:d0:68:c8:b7:c8:ca:3b:c5:
8a:fe:a1:d4:8c:c5:6f:b0:8d:c8:9c:d4:b4:72:44:
67:4b:e7:61:c8:c5:f7:29:3f:47:9d:9e:8f:1f:0b:
a3:1e:17:db:1b:f8:9e:0d:70:79:5d:d0:d8:8e:be:
00:bc:b2:19:35:31:90:b6:33:87:da:c7:b7:b6:3a:
bf:f1:44:b4:f5:5d:10:44:1d:f7:1f:f5:00:37:82:
7b:dd:f8:90:c1:82:b6:37:35:0e:5f:fe:78:74:77:
97:b5:77:e0:22:d5:da:16:48:fc:30:b8:d1:25:d8:
fe:fa:cf:a4:21:3c:2b:28:37:a2:98:20:8f:53:90:
3a:bb:bc:6d:e9:55:a8:d3:02:0f:b9:c6:b7:30:12:
f6:76:e0:f0:fd:78:7b:ec:e8:f6:6c:51:41:a8:68:
18:fa:31:bb:47:1d:ef:26:23:af:ad:59:e2:b7:ab:
98:19:4e:eb:38:ac:9d:95:d6:ab:50:8f:8a:fd:6f:
6e:ed:cf:57:4f:26:f1:44:ed:27:68:39:44:90:15:
64:b8:c2:69:82:29:be:66:22:14:07:08:f3:af:eb:
16:c6:7b:ad:fd:02:18:1f:0b:13:0a:59:0a:12:73:
f3:46:70:78:08:cd:f7:e6:e0:b6:ba:3c:46:58:21:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:5B:79:49:86:07:9B:DB:7E:E9:BE:33:2B:A0:68:28:68:B0:5A
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:b4:76:cc:cc:cf:0e:8d:ea:cf:0c:94:89:04:c5:41:41:
a3:e7:a9:27:b8:9e:ed:d5:89:20:b5:ea:98:32:b7:d0:42:41:
75:c8:79:df:1f:bb:c2:a4:8e:4b:7c:a7:ed:2e:85:cf:76:b9:
90:77:b4:ab:dd:ba:06:6b:78:3b:cf:8e:08:d7:b4:36:4e:7c:
c7:a1:13:8f:47:af:c3:3c:fe:66:44:45:bc:bb:58:37:bd:fd:
b0:fb:ed:0b:60:d2:21:e1:f0:30:65:87:94:f4:bf:e7:85:9f:
04:d8:c7:39:83:00:8b:0d:a6:0b:74:dc:d9:9b:6d:ce:10:52:
b7:2a:e4:dc:0a:04:a0:ef:1f:b5:f2:8b:87:ad:87:8a:7b:3a:
af:3e:f0:c6:4f:d0:db:ed:06:78:40:0b:52:bf:df:50:ca:57:
27:9b:c1:9f:27:51:f9:2e:dd:b6:b7:c2:3b:85:60:fc:8a:19:
b8:51:eb:72:57:ea:15:f5:12:f5:69:ed:83:9e:8b:ec:52:06:
81:90:72:78:04:69:0b:04:88:24:64:81:e8:5a:cc:f1:eb:88:
4b:b7:e5:19:19:21:ff:a9:cd:de:d9:af:f9:91:c8:c9:a8:16:
7b:39:fd:74:57:ff:f3:ff:23:76:44:b8:cd:fa:fe:ae:b5:0f:
30:a2:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:23:13 2025 by rpki-client