Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: L3uwqpmAvHPMfUCb60LrzY0ZRcLte7eDsa9oX//NYo8=
Subject key identifier: D7:2E:C6:D1:7F:C2:A2:21:A4:EF:00:20:72:73:4A:37:4B:EB:99:58
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 01977D8CA06C947D353FE08761AB414ACD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 159B
Signing time: Tue 17 Jun 2025 11:00:57 +0000
Manifest this update: Tue 17 Jun 2025 11:00:57 +0000
Manifest next update: Wed 18 Jun 2025 11:00:57 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: YrSPFi42ZLY3dk9VrW3vm/4QZkR9bYE+bPMVbCwPvyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:a0:6c:94:7d:35:3f:e0:87:61:ab:41:4a:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jun 17 11:00:57 2025 GMT
Not After : Jun 18 11:00:57 2025 GMT
Subject: CN=d72ec6d17fc2a221a4ef002072734a374beb9958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:e3:19:56:48:07:82:db:dd:b0:ee:3b:10:
bb:17:b3:d5:e4:dc:5a:64:3c:31:ac:4b:41:38:61:
8b:08:0a:f1:f3:9c:1b:01:e6:19:5e:04:90:8a:f5:
e5:a8:80:36:85:a2:e4:bd:98:91:00:b1:d5:6b:f1:
39:b7:eb:27:d0:71:c3:06:3e:f8:65:b4:5b:d5:c9:
fc:5f:87:47:2e:16:49:4e:6d:18:f2:9c:12:e1:3c:
d5:10:d1:2d:0e:27:c3:90:0a:34:f6:05:c9:14:31:
00:78:70:d6:29:cb:4b:10:42:30:43:33:2a:f8:75:
8d:72:b7:f1:64:f5:28:2f:e3:04:46:6e:d5:6a:b0:
b9:47:53:06:03:9d:e2:fd:30:de:de:89:92:2a:98:
d5:77:ee:40:3b:db:a6:09:98:cb:47:64:ef:aa:94:
13:67:db:6c:e4:d9:20:c2:38:0c:33:d3:47:db:8a:
14:a4:8b:c6:60:5b:07:0b:23:49:01:70:1f:0a:77:
53:a7:21:03:f3:0a:de:a2:cf:39:e4:e4:26:06:bf:
9c:d7:be:2e:81:af:22:ca:f9:15:bf:ee:00:67:f6:
40:01:9f:1a:c8:2a:10:6b:c6:81:de:8f:01:a6:f3:
d5:37:26:f3:27:c2:fd:d9:f0:47:c0:df:9c:6a:87:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:C6:D1:7F:C2:A2:21:A4:EF:00:20:72:73:4A:37:4B:EB:99:58
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:07:45:d0:2c:2b:15:ca:22:12:f7:25:09:c7:9f:e0:62:
2c:82:8f:d8:02:7f:b4:7a:74:b5:c1:d8:2e:4b:a3:89:ee:ac:
0d:fc:e9:19:ad:44:56:22:a9:07:fd:29:1e:13:e2:48:5b:02:
32:66:e6:a2:2d:48:b5:06:bc:10:ec:96:a1:5a:32:6c:8b:81:
2c:c2:db:be:cf:48:b6:7a:56:04:ed:14:7b:b6:f7:fa:0c:73:
41:36:65:b7:96:f4:95:e1:cd:95:c2:57:9f:38:dc:69:8c:24:
1a:b4:4c:4d:09:d8:2a:19:b6:eb:5c:0a:b2:62:ac:47:b5:9b:
94:bf:81:cb:57:0e:00:3f:ad:ea:61:4f:a2:ba:0f:f2:9e:6f:
dc:8f:36:ba:51:66:a3:30:a0:47:5f:5e:1d:8b:de:c0:a7:1d:
1c:37:4f:57:dd:a6:9d:20:20:e7:b9:6e:b8:bc:98:04:d8:b7:
eb:89:04:5b:b7:5e:95:f3:fc:50:eb:37:cc:75:42:9e:ab:27:
d4:6e:a6:c4:1c:48:83:65:25:14:2d:fd:9c:3e:e2:13:c5:5b:
94:b6:7a:a6:1c:9b:0b:84:17:ac:c9:99:92:63:f9:32:5c:af:
c7:d8:52:0e:c2:91:35:07:c2:11:6b:59:65:cd:4f:c8:d4:b4:
48:ed:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:25:15 2025 by rpki-client