Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: 6X+ipntZ0xJaLH+xHORIx6QvhGss/FgEmu0M27hIVVE=
Subject key identifier: 97:02:B6:14:38:11:82:E6:B8:BA:FA:96:BC:82:D5:9D:8E:7D:D5:CC
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019771884E150A096254C391C1594A6BB4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 03:00:47 +0000
Manifest this update: Sun 15 Jun 2025 03:00:47 +0000
Manifest next update: Mon 16 Jun 2025 03:00:47 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: kQZinKXrQIjb1jlXrJodc7zfiheka5q6ueJHJH6rPOw=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:4e:15:0a:09:62:54:c3:91:c1:59:4a:6b:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Jun 15 03:00:47 2025 GMT
Not After : Jun 16 03:00:47 2025 GMT
Subject: CN=9702b614381182e6b8bafa96bc82d59d8e7dd5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:fa:29:08:c6:b9:f0:1c:98:23:c2:7b:22:
9e:48:d4:93:08:9a:75:80:df:74:85:00:86:a4:b0:
5a:40:18:84:73:33:6a:ff:86:62:9c:5f:ae:ef:71:
e0:35:84:63:db:94:a1:fe:7f:12:17:c6:d8:92:a0:
04:4d:ea:fe:94:2f:db:a4:7c:9a:43:4f:1d:38:d8:
97:98:cc:45:b4:5b:b8:d4:72:6f:af:c6:de:d3:ae:
dc:15:7e:f9:9d:1d:77:16:2b:f4:a2:b5:e2:00:f0:
81:ba:52:6d:0a:49:46:3b:e5:4f:f5:92:ab:3d:82:
7f:94:83:4b:27:05:23:d6:fa:8f:73:7d:0f:56:02:
8e:53:a7:32:d0:01:d0:a1:52:0b:55:c5:da:5c:9d:
98:c7:b3:d9:b0:52:4e:aa:69:10:00:23:be:0c:46:
09:5f:2a:14:82:36:95:30:47:eb:5c:db:91:41:83:
3f:dc:46:e6:f9:2e:52:7d:ed:8f:ea:ad:30:bd:60:
0e:c6:91:66:25:2f:af:6f:ee:a1:c2:50:e3:88:3d:
20:02:2e:ee:00:77:a3:32:14:87:15:76:5f:e8:11:
e2:41:d4:60:1e:ef:a7:fa:a1:4a:cb:26:66:28:3d:
1f:11:89:fd:d6:c1:f8:5b:de:bf:0d:de:7c:9d:7d:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:B6:14:38:11:82:E6:B8:BA:FA:96:BC:82:D5:9D:8E:7D:D5:CC
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:d3:58:c2:b1:25:3f:b2:cd:7a:b9:17:e4:f4:94:ac:c2:
aa:f0:d0:66:ce:e7:cf:56:76:d9:8e:a6:1d:9d:0c:f2:45:f4:
df:34:de:d6:24:68:c5:51:16:84:39:75:d5:5c:7c:69:6c:bb:
5c:41:76:82:a8:70:cc:2f:bb:d4:4a:2a:bd:cb:a1:09:7f:10:
a8:c7:75:b2:39:2f:62:11:e8:33:b7:32:3f:f8:7a:1a:2c:77:
fc:de:24:23:18:d9:e6:db:0f:c7:56:70:08:c3:f0:c6:9f:1f:
c4:5a:a8:5f:8f:60:da:e2:d1:a5:6d:e1:4c:8d:f6:6e:28:4b:
a2:98:60:9d:66:a9:ff:4e:3d:9f:d9:93:fa:11:e7:aa:6a:8e:
4a:63:da:9d:0e:a5:a7:ac:90:c3:cb:ea:15:f2:4e:c3:bf:09:
40:83:15:04:7c:00:98:f3:50:5f:f0:b4:c8:0e:f0:be:18:16:
d4:63:93:d5:c9:e2:a4:56:1c:69:69:ab:a1:d8:2a:6b:43:eb:
9e:ca:76:d3:60:a9:e9:59:65:5e:a2:ec:3a:fb:58:7a:ec:af:
71:b3:3f:3b:12:54:3f:94:a5:42:7a:4a:5a:4d:bf:33:81:31:
3e:9c:59:60:b2:4f:83:df:ae:ef:cf:b0:71:05:de:4e:d4:0e:
c2:96:ac:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiE4VCgliVMORwVlKa7S+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1
ZDY2ZjkwHhcNMjUwNjE1MDMwMDQ3WhcNMjUwNjE2MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NzAyYjYxNDM4MTE4MmU2YjhiYWZhOTZiYzgyZDU5ZDhlN2RkNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/X6KQjGufAcmCPCeyKeSNSTCJp1
gN90hQCGpLBaQBiEczNq/4ZinF+u73HgNYRj25Sh/n8SF8bYkqAETer+lC/bpHya
Q08dONiXmMxFtFu41HJvr8be067cFX75nR13Fiv0orXiAPCBulJtCklGO+VP9ZKr
PYJ/lINLJwUj1vqPc30PVgKOU6cy0AHQoVILVcXaXJ2Yx7PZsFJOqmkQACO+DEYJ
XyoUgjaVMEfrXNuRQYM/3Ebm+S5Sfe2P6q0wvWAOxpFmJS+vb+6hwlDjiD0gAi7u
AHejMhSHFXZf6BHiQdRgHu+n+qFKyyZmKD0fEYn91sH4W96/Dd58nX0LNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcCthQ4EYLmuLr6lryC1Z2OfdXMMB8GA1UdIwQY
MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt
NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh
LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFzTWMKx
JT+yzXq5F+T0lKzCqvDQZs7nz1Z22Y6mHZ0M8kX03zTe1iRoxVEWhDl11Vx8aWy7
XEF2gqhwzC+71EoqvcuhCX8QqMd1sjkvYhHoM7cyP/h6Gix3/N4kIxjZ5tsPx1Zw
CMPwxp8fxFqoX49g2uLRpW3hTI32bihLophgnWap/049n9mT+hHnqmqOSmPanQ6l
p6yQw8vqFfJOw78JQIMVBHwAmPNQX/C0yA7wvhgW1GOT1cnipFYcaWmrodgqa0Pr
nsp202Cp6VllXqLsOvtYeuyvcbM/OxJUP5SlQnpKWk2/M4ExPpxZYLJPg9+u78+w
cQXeTtQOwpasGw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:39 2025 by rpki-client