
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: 04h8S7SFGlbcCjpruhv4GJN1YnGDVTyqHV19kFjF2gw=
Subject key identifier: A6:0E:A0:8E:A1:89:46:E9:F2:34:AE:C7:8A:45:BB:41:29:8E:5F:98
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 01976929FC2F738054206F6B2DC2499EC0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 12:00:48 +0000
Manifest this update: Fri 13 Jun 2025 12:00:48 +0000
Manifest next update: Sat 14 Jun 2025 12:00:48 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: naXLzZNKvbhixLV89frfVBJQU79oyajRuSX8B7bMwMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:fc:2f:73:80:54:20:6f:6b:2d:c2:49:9e:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jun 13 12:00:48 2025 GMT
Not After : Jun 14 12:00:48 2025 GMT
Subject: CN=a60ea08ea18946e9f234aec78a45bb41298e5f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:9e:f2:52:67:31:ce:e0:9b:1d:2d:c3:a2:
43:2b:3e:12:86:ea:e5:e5:c5:30:54:d5:12:8e:d2:
a8:80:8b:7f:fe:71:ec:f3:f9:94:93:0d:e4:35:31:
76:db:93:0d:f2:ba:b0:8e:c3:9e:3e:a7:28:29:19:
2d:b0:f7:ab:c9:2f:9e:50:2f:35:7d:b1:d4:82:1a:
4b:5f:ed:08:4c:83:6f:8a:38:df:d8:a5:9e:47:ce:
80:aa:b2:71:4e:8e:bf:12:b3:0d:94:6f:1b:5a:db:
0c:93:f0:cd:bc:97:3f:3c:46:85:17:18:7a:d4:62:
53:0f:e2:ed:f3:e3:04:ce:b3:81:c1:8b:9d:e2:54:
77:62:b7:a8:1f:31:25:01:48:74:a7:ea:53:a4:64:
8a:bf:53:51:b6:02:b4:d6:67:fb:56:79:c3:34:e5:
4c:0b:1a:1e:b0:92:52:bd:5b:eb:ec:ea:bd:1a:ec:
71:cb:86:b8:b5:e8:3c:66:f2:18:9d:06:a9:02:af:
b4:bb:b5:c6:aa:12:44:08:e8:6b:5a:fa:20:d9:76:
8a:a9:0b:20:e4:65:d1:79:d6:f2:8e:1d:8a:6f:20:
93:68:0a:1b:7b:d0:8b:89:07:75:ab:84:78:0d:af:
2a:b5:f8:8f:47:ea:87:0b:2f:1a:28:01:a9:17:84:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0E:A0:8E:A1:89:46:E9:F2:34:AE:C7:8A:45:BB:41:29:8E:5F:98
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3e:4c:0f:67:8c:3a:99:1a:8d:df:f5:e0:0c:07:76:39:ab:
d2:90:5f:b7:07:cf:70:d7:7f:32:b5:71:b0:c1:bf:d5:99:c3:
9a:ed:97:1e:61:0b:0c:3b:06:28:5e:0d:5a:d3:84:aa:e3:ef:
b2:97:94:39:cf:e0:0b:7f:b9:15:09:ba:b0:0d:85:5c:61:d6:
ea:ca:cb:de:54:b2:67:14:0f:27:5c:a7:ab:01:bc:87:b5:3a:
85:71:18:51:f7:e2:82:b6:c8:d1:d1:19:5d:d1:48:12:41:f0:
aa:34:21:29:91:c7:ea:f6:6c:cb:e8:46:1b:07:25:dc:9f:e2:
3e:ed:0d:4f:1e:8b:18:af:13:39:13:79:a1:b6:04:c6:38:21:
05:f5:13:73:26:17:b6:47:39:52:3f:8f:da:3b:5a:b9:64:d1:
40:88:ae:1a:b1:2a:76:3c:d0:a6:91:86:3a:f2:2b:ee:d4:f7:
1a:f6:01:7c:9f:a3:6d:9f:4e:b6:9d:a1:3b:3c:30:c6:ae:d8:
84:8f:f9:95:e6:71:25:ed:40:bc:75:76:b3:b1:8a:69:4c:86:
51:a3:4b:be:53:8a:9a:1d:f4:2c:9b:84:b4:d5:70:62:bf:dc:
75:84:08:f2:99:66:e4:b9:42:56:f0:b5:11:5f:ad:a8:29:43:
43:b3:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:04:08 2025 by rpki-client