Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: NYJ11iILaj+WAMkVkGbTh8FOtGt3EUvX2bMVI8o3RiU=
Subject key identifier: F1:49:DC:B5:55:91:5E:E0:C0:DD:61:ED:86:09:66:66:D9:EB:95:BF
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01976D3E53296864247A045265D356E0FF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 09EE
Signing time: Sat 14 Jun 2025 07:01:30 +0000
Manifest this update: Sat 14 Jun 2025 07:01:30 +0000
Manifest next update: Sun 15 Jun 2025 07:01:30 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: nHrNR/jXEt0Dx6Fn4fDnDnQdpitoRo+tLwTZmX8zDqI=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:53:29:68:64:24:7a:04:52:65:d3:56:e0:ff:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jun 14 07:01:30 2025 GMT
Not After : Jun 15 07:01:30 2025 GMT
Subject: CN=f149dcb555915ee0c0dd61ed86096666d9eb95bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:14:2f:cb:3b:45:b2:71:07:20:f3:4e:4e:
83:89:73:20:57:c0:fb:83:df:02:fd:3b:f9:13:db:
ab:94:c4:a3:6a:99:6d:64:f7:e6:49:f0:ff:9b:5e:
9e:3a:59:1d:64:d2:f5:9a:cb:e2:a1:a1:4a:14:7a:
cf:fa:44:13:fd:b4:22:48:e0:d4:11:07:e9:4a:cf:
16:c5:bb:56:d0:28:2e:25:81:87:14:45:85:ad:06:
b4:88:d1:b4:a9:da:1b:16:8e:e5:70:f7:a3:19:67:
49:b5:be:36:57:f3:8f:30:cb:bb:ba:46:e2:4f:6a:
fe:32:65:a1:a8:5f:60:be:64:74:e8:0e:4c:07:fc:
61:60:06:82:88:71:9e:f2:f7:17:94:d8:fc:0f:87:
48:b8:b0:85:6c:85:1c:6b:9b:e4:73:38:75:6f:67:
b0:aa:16:85:7d:da:30:03:26:6a:5e:8b:af:7d:7a:
89:17:c5:e2:32:03:ca:79:52:35:a5:f7:f5:81:32:
cc:3f:7b:c3:d5:91:e8:57:5b:e9:81:af:4d:bb:55:
22:80:ad:2c:97:c8:cc:d3:9a:f1:b5:6f:44:15:32:
3e:3b:f2:4f:5b:8b:42:3e:37:a6:c8:d1:49:65:d2:
5e:e4:4c:ea:bb:5e:26:97:2b:36:69:38:a4:71:eb:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:DC:B5:55:91:5E:E0:C0:DD:61:ED:86:09:66:66:D9:EB:95:BF
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:80:76:ce:fd:63:36:c9:52:f4:54:9f:e7:6e:58:3f:d9:
1f:28:0f:7e:ac:88:fb:d6:41:62:4b:ac:62:80:08:38:ea:04:
20:3d:2b:e1:e4:a4:bd:2e:8f:11:9d:49:1f:c5:15:b3:77:ba:
85:0c:87:8e:b8:50:d6:7c:1c:76:52:b5:a2:de:f1:03:62:b3:
63:0c:5f:ab:75:7e:6b:3f:72:80:11:70:cc:ee:5a:1b:e6:cc:
07:24:de:fc:82:7b:d4:d9:f6:93:17:75:3c:a1:21:79:78:87:
6b:4e:52:b4:8e:2b:c3:53:fb:20:7b:1a:e9:c3:d8:0f:cd:40:
c7:5b:9d:ba:c3:36:78:f8:6b:81:51:77:af:34:46:3f:38:e5:
f1:3d:aa:37:b6:f7:30:71:91:3c:90:b2:83:69:c1:91:5d:b8:
89:a6:9b:38:af:f6:7e:fd:40:d2:30:be:50:a6:b3:a1:73:5e:
b7:1a:fd:e6:16:a5:7a:bb:42:27:48:70:dc:cc:f3:9f:a5:4e:
69:3c:3e:ac:c0:9e:1a:aa:60:67:fe:76:d9:52:79:d4:11:61:
7b:ee:80:72:87:9a:88:d4:44:f6:f2:52:57:c8:9f:bd:be:ce:
a0:3b:5c:0d:50:f8:18:7a:89:a0:48:21:4e:a0:fe:69:c5:7a:
e0:53:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:11 2025 by rpki-client