Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: SXMH558E7eOIC1fBi9RHT4SikHMr6EP0EqeJgcrSrv8=
Subject key identifier: A9:F5:7C:CC:50:A9:B2:F6:04:AD:F6:30:02:3E:EB:4C:30:83:48:ED
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 01976F62AA968F1DB248055E147FC34ECBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 04C6
Signing time: Sat 14 Jun 2025 17:00:26 +0000
Manifest this update: Sat 14 Jun 2025 17:00:26 +0000
Manifest next update: Sun 15 Jun 2025 17:00:26 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: 0LNTugguxLzUfcDg1XDirhOGWm/PsOdjPQdb3sf5d1M=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:aa:96:8f:1d:b2:48:05:5e:14:7f:c3:4e:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Jun 14 17:00:26 2025 GMT
Not After : Jun 15 17:00:26 2025 GMT
Subject: CN=a9f57ccc50a9b2f604adf630023eeb4c308348ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:cb:fd:32:8e:1f:53:4e:96:12:ec:16:2b:
76:0c:8a:42:59:6e:3b:0f:cc:e5:b0:04:8c:2e:8f:
59:13:5d:0b:be:c1:68:de:b1:90:8e:58:03:30:df:
b2:7f:6d:6f:de:08:73:f7:f7:f0:20:c6:99:19:3b:
b1:36:e0:78:26:ed:65:72:5e:42:76:dc:f3:6b:06:
43:5c:f4:73:a2:08:d1:4f:d6:39:19:e1:3a:0f:86:
84:0b:7f:87:67:52:c8:2b:a6:0d:07:87:87:d6:85:
24:92:ac:89:30:88:51:31:78:69:c5:cf:2a:fe:ad:
e0:0e:13:04:cb:ee:6c:11:c5:3a:84:30:20:82:5b:
a8:62:3c:d0:50:f9:7b:22:90:8f:21:c5:09:3d:71:
bc:49:f9:d8:fe:e2:93:7a:22:fd:d3:e3:c9:2b:d0:
90:d1:2f:c1:a8:e1:59:43:1e:b8:47:ae:74:84:0f:
7b:59:dc:d6:78:14:19:0f:c9:19:69:72:5b:6e:b6:
1c:08:ae:b8:c9:b0:59:ad:48:70:80:3a:88:33:4f:
d5:f0:ca:bc:df:44:7e:f7:4e:79:84:f1:76:23:0a:
61:94:97:33:29:71:b0:bb:6a:4c:b6:f5:eb:d0:20:
9a:ff:5e:ec:22:64:8e:5e:eb:e7:24:ef:67:5c:23:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:7C:CC:50:A9:B2:F6:04:AD:F6:30:02:3E:EB:4C:30:83:48:ED
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:c3:4a:cb:88:2c:7b:2a:fe:b7:56:3b:c3:87:df:55:3e:
8f:46:9e:ed:7b:91:08:6e:67:f0:88:7e:95:01:c6:66:d2:c6:
2a:84:2a:4b:49:e0:08:a1:a3:d0:b6:fa:4d:8d:89:9b:d1:93:
46:f6:ea:51:7f:4f:65:43:ae:55:dc:ef:b9:ca:38:74:c6:54:
cf:e9:e4:33:aa:cc:12:8b:17:fe:89:aa:5e:3c:8e:1e:42:cd:
9a:84:44:b5:03:c7:ad:3a:e3:de:91:c5:b8:31:c2:c4:e1:09:
0d:1c:4f:15:22:9b:4d:03:32:73:d4:43:a2:67:00:05:98:e7:
bd:bf:e3:c6:fd:f1:a7:71:55:bf:26:ef:f7:ae:b6:3d:de:92:
07:e4:dc:73:a4:fc:e6:02:61:49:78:88:07:b7:75:d2:25:83:
33:b4:9d:49:d2:ee:4c:ea:55:72:04:c3:d5:91:78:61:04:5a:
7a:f6:e0:c7:47:a9:d5:6f:18:40:55:81:2a:41:d6:c4:eb:02:
77:7b:33:fc:4c:41:75:6d:04:02:52:31:9f:07:3a:e8:69:c0:
8f:d2:0c:6a:0f:c6:a8:02:38:68:ee:1e:c7:15:f0:93:01:bb:
de:0d:c7:df:f2:cb:7e:80:64:63:04:ac:a9:cb:2f:3d:2d:9d:
35:c2:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:05:54 2025 by rpki-client