Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: 2gokVFOY6q1Zphtiecn+CIbL55SWtvjZcPa0BmqDn3Y=
Subject key identifier: 89:20:E0:17:7B:C9:C2:96:62:2A:70:1E:90:C6:67:AA:A8:C1:4F:38
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019768BBF091AAFD993657180B9CD9642A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0EA1
Signing time: Fri 13 Jun 2025 10:00:36 +0000
Manifest this update: Fri 13 Jun 2025 10:00:36 +0000
Manifest next update: Sat 14 Jun 2025 10:00:36 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: almlfwOmj5Wdgf+5NmVW20BTAMfopgOUpF6hVdqjZL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f0:91:aa:fd:99:36:57:18:0b:9c:d9:64:2a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jun 13 10:00:36 2025 GMT
Not After : Jun 14 10:00:36 2025 GMT
Subject: CN=8920e0177bc9c296622a701e90c667aaa8c14f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:19:49:b5:63:2f:0c:e8:f0:ec:9a:00:04:
99:f8:02:83:23:87:db:17:5f:6a:b0:39:f8:0f:f4:
2b:1d:e4:07:61:d5:b5:22:e6:27:62:c1:15:de:2d:
f3:2d:0c:e2:84:a6:ea:96:95:7c:21:46:27:a3:8e:
9b:8c:56:a5:5d:e8:c5:e8:0b:f9:47:eb:5d:d0:15:
82:a1:c8:d5:72:00:18:be:43:6c:52:86:e9:c7:38:
4b:96:87:81:d4:c9:a6:b2:fa:5e:85:57:69:ff:41:
71:e2:26:6f:6d:a8:32:78:4d:a3:6f:8f:b2:31:d0:
b3:ce:12:04:96:70:ad:fd:29:3c:97:b3:58:44:5a:
e1:fd:86:22:c2:02:ac:1d:c7:33:ec:0c:21:87:7b:
2a:8e:70:94:76:03:d4:fe:62:59:62:57:34:49:52:
63:e9:5c:53:1a:ac:76:01:98:8f:36:4f:d8:82:1a:
56:c7:ca:52:2e:ac:f7:ec:1e:65:b3:14:a2:ac:93:
cc:58:04:94:40:79:b3:f5:df:26:f0:2c:98:cc:b4:
d2:f0:80:4c:26:d4:8c:55:4b:74:ad:05:83:a4:62:
b6:df:bc:0a:dd:2a:a9:bf:04:f0:60:31:61:08:1d:
36:d3:9d:6e:47:62:bf:3d:bd:98:b2:23:19:86:84:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:E0:17:7B:C9:C2:96:62:2A:70:1E:90:C6:67:AA:A8:C1:4F:38
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:0f:0a:a3:bb:a5:ef:1a:02:31:bc:18:d4:85:23:68:03:
2b:db:d0:1c:22:38:55:6a:46:3f:47:d4:f1:f8:1e:6d:fd:c2:
27:9e:5c:c9:74:8f:8f:61:83:20:a7:a6:1c:81:0f:8b:40:b1:
fb:96:16:5a:f6:cb:9a:75:50:9d:c6:10:8f:56:8e:fc:33:18:
5e:be:a9:ac:f1:31:31:51:18:88:c9:3f:7e:bb:01:fb:67:3e:
3f:8f:0d:d6:70:45:a0:53:ea:a1:32:29:e2:af:9d:5e:34:e2:
06:e8:54:83:07:03:ae:22:7e:65:aa:86:ad:a3:81:b4:64:8d:
4c:6c:2e:af:7c:0b:b9:81:46:a7:09:4f:7d:c2:46:45:5e:20:
07:96:46:29:da:87:7d:9c:c1:0d:6f:72:a8:d0:10:e6:8b:b4:
c6:c2:1a:0c:12:c6:86:2a:83:3c:7a:b4:ef:c0:7b:c7:48:7a:
17:f2:52:ee:30:23:8c:c4:00:00:84:0d:8e:42:44:04:84:c2:
a8:a7:5b:d2:de:33:a3:36:cf:f2:10:e3:39:d6:8e:65:72:35:
8e:5f:9c:72:80:2e:11:e7:f1:6a:ff:d0:e4:04:fd:8a:0c:65:
ff:24:f9:db:13:c0:4d:c5:cf:cd:66:42:f0:ca:a2:2f:fd:0a:
f8:21:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:07 2025 by rpki-client