Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: NOqWHaTNa3GxkQlopHSnOooxdfFLpk+vn/NexTo1/U0=
Subject key identifier: 68:17:0A:B8:89:27:00:57:DE:B3:8E:EF:98:08:8A:5A:DE:27:0D:09
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 019778661D5618D765910BEEA236AADC3A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 044E
Signing time: Mon 16 Jun 2025 11:00:47 +0000
Manifest this update: Mon 16 Jun 2025 11:00:47 +0000
Manifest next update: Tue 17 Jun 2025 11:00:47 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: OeOA4YxkUKSWWKoqa1f3NHikTzipc1Wrmj0pJsLblhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:1d:56:18:d7:65:91:0b:ee:a2:36:aa:dc:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Jun 16 11:00:47 2025 GMT
Not After : Jun 17 11:00:47 2025 GMT
Subject: CN=68170ab889270057deb38eef98088a5ade270d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:05:66:08:3c:05:11:ac:24:98:3f:a2:99:
50:91:3e:62:0e:64:f5:f5:75:83:b5:51:39:af:e4:
ce:83:f9:94:86:4b:09:c5:42:2c:d6:d6:cc:d7:c3:
9d:63:de:ba:7b:46:3c:9e:76:48:0d:2d:dd:06:a0:
c6:53:29:bb:76:a9:3a:ad:12:28:46:6c:46:3c:98:
be:5c:59:6e:4a:af:41:e0:2a:1e:a1:ed:e6:27:d5:
5a:00:b5:a9:1b:29:ec:2f:47:cb:1f:a6:10:e4:3f:
3f:0c:87:ba:f9:3c:f2:d2:5a:3b:f6:b9:f5:74:ec:
a8:e6:34:10:6e:c0:a9:0b:d5:71:e5:fa:46:8c:71:
47:98:14:36:02:9c:81:a2:d5:1e:95:0f:e4:1b:cb:
c8:91:e9:58:55:65:7b:ea:d8:56:5f:49:19:e4:51:
ba:da:4c:92:51:2f:8a:65:85:01:33:57:69:6c:eb:
0d:54:bb:33:b4:35:47:de:c7:f3:8b:a5:92:b8:dd:
f2:35:cd:d5:e5:b6:23:66:20:b3:a1:20:f4:d2:32:
36:2d:bb:0a:c0:bd:7d:81:c7:57:dc:b9:b8:2a:0b:
cc:6a:92:04:3b:b0:1d:8e:7c:05:b1:2a:1b:49:65:
6b:e9:c0:9c:e1:82:a3:74:c4:40:8f:b6:f1:1f:cc:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:0A:B8:89:27:00:57:DE:B3:8E:EF:98:08:8A:5A:DE:27:0D:09
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:f2:d5:98:04:e5:36:57:d5:84:8d:27:d2:d3:20:f1:66:
5c:39:8f:f6:f8:3f:ab:be:93:1a:59:f9:45:ff:f9:fd:4d:33:
21:b7:4c:d5:b9:d1:d8:bc:0e:4f:0d:e8:ea:56:3c:2d:12:ec:
04:44:d0:5d:0c:8a:cc:63:32:20:13:4d:83:66:16:81:0b:2d:
33:63:9d:34:71:f9:65:7e:8c:63:88:0d:de:6b:04:d8:1a:7a:
5c:25:8f:50:6c:2f:a5:5f:79:03:20:51:41:70:15:66:b4:67:
f7:81:55:3e:09:49:d4:22:5c:6a:60:a6:f4:e4:b4:41:25:59:
9c:92:b0:8f:1d:1f:1c:78:bd:ae:8f:b4:64:b6:8a:c6:3f:f0:
cd:4f:da:25:d9:f2:8b:ca:ca:a8:ed:93:8c:f3:69:1c:e9:33:
e8:7b:1e:77:f9:7a:8b:1c:2a:8f:61:f3:82:d5:3e:ab:17:d1:
45:94:73:b3:21:77:f7:b7:a6:8c:e6:5a:0d:3b:41:67:4b:9f:
c8:6d:9d:94:6e:2d:31:2f:59:94:14:09:4e:c8:58:47:b0:e7:
ba:e0:24:09:02:04:f2:a3:fc:3b:93:88:bb:bc:44:65:43:c6:
ac:dd:a1:e6:57:0f:33:f0:20:39:ee:a9:52:58:ef:13:e7:73:
86:2a:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:58 2025 by rpki-client