
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: fwe5ytZG/3vofOGYBxJFRaFRH+9hndGFiWr1zYWzGyY=
Subject key identifier: 77:64:D5:5E:74:A5:58:9E:3B:93:2B:61:B2:86:85:67:AD:F6:7C:F8
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 01976C623490532E9730FC28E05045E1F6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: DE
Signing time: Sat 14 Jun 2025 03:01:04 +0000
Manifest this update: Sat 14 Jun 2025 03:01:04 +0000
Manifest next update: Sun 15 Jun 2025 03:01:04 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: oyhGX+dSg3GHtswgkeuQtuga+jGuk2AMeGGFUFQp46M=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:34:90:53:2e:97:30:fc:28:e0:50:45:e1:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jun 14 03:01:04 2025 GMT
Not After : Jun 15 03:01:04 2025 GMT
Subject: CN=7764d55e74a5589e3b932b61b2868567adf67cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:4f:dc:a2:4c:8a:95:a8:0e:d5:ed:7b:08:
c6:7e:a9:61:df:de:97:04:bb:d3:20:b9:13:c9:d6:
46:c3:8e:e8:48:15:1c:8a:a8:48:ef:a6:3b:49:38:
05:c9:a3:54:34:cd:b4:30:b7:b9:e0:37:92:a4:5f:
5c:d6:08:66:7f:b8:d9:11:d2:4a:fa:31:ff:a2:57:
58:27:4b:0b:79:1a:9a:be:45:0e:4d:02:cc:7c:51:
c4:b7:58:19:99:1c:39:fd:4d:9d:d4:f3:0f:cd:93:
3b:e6:26:c9:d0:93:3c:31:64:d7:1d:6c:14:ff:aa:
e7:58:eb:8d:64:d7:fb:f2:b7:fc:04:c4:80:25:41:
e5:a0:44:8b:73:ee:3a:81:ac:78:7b:01:bb:ac:8e:
9b:d3:dc:21:13:4a:e9:9a:b9:5a:fc:6a:2a:15:bc:
3c:31:ce:3b:7d:6c:ef:8e:14:f3:d2:41:a2:20:0b:
17:3c:97:77:cb:b5:f8:17:39:c1:13:69:8e:99:2c:
8f:23:b4:9f:dc:7d:47:08:35:d4:98:1c:4c:17:c1:
d7:70:13:be:6f:03:f5:f6:65:43:6d:11:8c:d3:9c:
5d:fc:0e:b0:30:a4:58:17:e8:8f:60:ed:3e:38:e6:
dc:60:42:c7:ce:94:42:7e:26:44:90:76:b8:65:94:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:64:D5:5E:74:A5:58:9E:3B:93:2B:61:B2:86:85:67:AD:F6:7C:F8
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:6e:cd:45:79:ee:5d:2c:b1:cc:3c:f6:af:80:1f:4b:9e:
85:6c:bb:72:b4:96:74:12:0a:c5:4b:dc:71:b2:48:cc:e8:f8:
c2:40:2b:83:a7:c9:fe:53:8a:89:4f:ea:9b:f3:b2:5f:5f:7e:
b0:a8:96:b5:83:ab:e2:b6:a5:be:70:4a:61:8d:a5:16:78:0e:
47:67:de:3e:38:1a:94:eb:cf:1c:cf:ba:2d:54:ae:b1:d2:ce:
20:b8:28:18:68:35:83:5c:e3:b2:5e:8f:a6:6c:47:66:99:fc:
78:67:68:cc:47:4a:a1:a1:87:7f:31:48:89:c8:b3:88:05:f8:
5e:d8:69:19:2f:e4:02:9b:02:90:0d:d8:f9:e6:77:33:e2:d4:
57:bd:c5:c1:de:c0:9d:09:ba:24:20:73:50:d0:f9:ba:27:9a:
66:e3:2e:86:56:a4:29:70:63:2f:63:68:11:b0:cf:86:4c:a9:
14:06:a9:fa:4b:40:62:1b:fe:02:bd:a0:a2:07:dc:be:15:d3:
bf:ee:55:5d:85:80:a6:c1:90:12:97:a5:19:23:3b:56:22:2c:
53:c0:57:f3:47:0a:e9:d6:6d:62:3a:70:50:f6:73:75:38:e6:
b4:9a:ae:14:76:48:74:21:fe:d7:5f:85:7d:2e:61:97:e9:52:
03:fe:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:41 2025 by rpki-client