Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: 3OC11h9jAyCnGLN664UvGsCSf0HfouAzWonk0Cn47XY=
Subject key identifier: 31:E3:1C:94:A6:54:C9:84:39:5B:AF:38:6C:14:39:C2:DA:BC:98:20
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019769CEF9971D20CB8026AC9C48AB25BF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 055E
Signing time: Fri 13 Jun 2025 15:01:01 +0000
Manifest this update: Fri 13 Jun 2025 15:01:01 +0000
Manifest next update: Sat 14 Jun 2025 15:01:01 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: PAp3iVKPjtcFGw+JAQNOcmxUXU8Ce/tFejPrO/xSyhY=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f9:97:1d:20:cb:80:26:ac:9c:48:ab:25:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jun 13 15:01:01 2025 GMT
Not After : Jun 14 15:01:01 2025 GMT
Subject: CN=31e31c94a654c984395baf386c1439c2dabc9820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:9a:b3:30:1c:7d:0d:4d:28:7f:f9:06:8f:
39:80:d4:ee:31:47:83:20:72:a0:3c:92:08:a9:23:
97:8c:62:85:f8:1c:db:88:4e:88:c2:80:8f:b6:83:
13:ae:2b:8c:96:c3:0a:d6:2c:3e:97:15:a9:8f:fb:
05:f3:77:1f:bc:d6:d7:cd:a8:fd:c9:d5:94:9e:22:
f0:a4:06:90:e1:29:e0:67:24:95:ba:cf:1e:27:0d:
f6:ce:bf:d2:74:f1:f3:8a:59:c5:c2:59:5b:55:0b:
0c:cc:54:8f:99:2c:45:c0:14:be:41:e7:2a:54:8e:
bf:0e:16:42:ad:38:10:0c:4b:98:79:91:ca:14:cf:
1d:dd:78:5c:ed:2e:14:93:8c:bd:9f:e9:38:3f:48:
2b:4e:d6:80:54:0b:94:9e:24:cb:ba:38:f8:91:88:
41:db:16:a8:43:6f:7d:29:68:7b:a1:5e:f3:d5:8b:
45:46:f3:ca:fd:01:52:a3:af:9a:6f:65:93:cf:99:
bf:26:d9:e6:97:11:a9:a6:17:83:38:53:7a:94:56:
a7:50:ba:f1:4b:ef:cb:70:c3:a4:28:39:eb:a0:f0:
cb:a5:7d:f1:f4:c4:98:6e:5c:e1:e2:42:8e:e7:64:
2c:d1:a1:c9:a5:9c:73:8f:87:d4:ba:12:d9:6b:87:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:1C:94:A6:54:C9:84:39:5B:AF:38:6C:14:39:C2:DA:BC:98:20
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:bd:6e:b7:03:61:df:d9:ca:de:56:94:db:cb:ad:14:1d:
11:13:6b:1e:d4:ef:d3:8a:9e:a6:bf:2a:c9:11:2a:4d:00:62:
35:7b:02:3d:a9:31:0e:1a:3b:6f:cb:fd:27:58:46:d0:0c:52:
5a:1e:90:72:1e:29:a0:2b:2a:fc:e4:fd:d9:1f:61:ae:77:aa:
e6:0d:9a:6b:77:fb:07:d8:19:bc:57:fb:aa:5f:bf:f5:22:34:
15:27:cc:e5:4c:7b:85:7a:22:b5:96:37:07:ec:70:26:3c:fe:
0a:19:13:fb:ae:2e:08:1e:f6:6c:79:e8:95:b3:30:65:68:a3:
48:04:0b:50:53:50:40:48:03:56:40:5c:54:66:e9:35:83:98:
97:a9:34:7f:08:ac:8c:1b:83:a4:64:b9:7e:b2:44:b6:98:f4:
a6:61:3f:a5:ed:5c:d8:02:02:db:f9:2d:36:68:6f:f8:a9:ab:
ce:c9:b1:5c:14:67:31:46:7c:5d:96:b6:30:ef:7d:9a:2e:93:
8c:78:9f:99:c1:72:b5:68:4b:ab:b1:6b:1f:d3:1a:66:49:35:
9a:05:18:6f:e6:67:23:d3:27:ac:f5:ba:e0:28:a5:f8:79:6d:
9f:fe:2a:c1:3b:1c:47:20:a9:55:7b:c6:ed:70:32:3d:36:a7:
3a:bd:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:16 2025 by rpki-client