Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File: UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier: L7OTj5y+UTv5RE9dFdqVOU8g4h9ds4DoHdI6G7Rxfzg=
Subject key identifier: 28:80:20:AE:F3:5F:AD:19:28:33:D2:29:49:E8:E6:3F:C4:D8:E2:76
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer: /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial: 019783203EC3CC70C80EC74ADF8413E2E505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number: 1499
Signing time: Wed 18 Jun 2025 13:00:17 +0000
Manifest this update: Wed 18 Jun 2025 13:00:17 +0000
Manifest next update: Thu 19 Jun 2025 13:00:17 +0000
Files and hashes: 1: B5jBrigaJO3-AA-t_YN4JZyKlOc.roa (hash: rGNTEj/GGFLwPvW+NfWJ0mtsiCJfkPNhKXWRWEo8b5k=)
2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: cYsAee/nApwOCrZMWdOjEbTxbkk+1oI+WvTi6WVafcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:3e:c3:cc:70:c8:0e:c7:4a:df:84:13:e2:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Validity
Not Before: Jun 18 13:00:17 2025 GMT
Not After : Jun 19 13:00:17 2025 GMT
Subject: CN=288020aef35fad192833d22949e8e63fc4d8e276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:f9:52:0f:3a:f5:0f:bc:b6:a7:4d:04:2a:
ae:bf:01:d1:a7:4a:da:a0:f7:0a:d1:d3:eb:d1:33:
cd:f2:fc:69:42:a7:f3:fc:75:98:f1:77:de:2d:2c:
3d:64:e7:75:69:ab:5c:29:71:19:53:9f:97:61:3d:
9d:7f:fa:b2:b4:cb:0d:4a:ef:3a:46:71:82:2f:4f:
c6:01:98:37:25:3b:3a:2d:fb:93:6c:e4:74:1a:a3:
ef:3a:32:db:c7:10:9c:3d:28:a0:ec:09:b4:80:a8:
74:81:36:55:45:a7:b3:ba:a4:95:c3:63:e4:ea:e8:
5b:64:d7:81:df:9f:6f:b7:1e:64:07:71:f6:ca:fb:
48:33:eb:d6:bb:71:25:2f:9a:41:a2:c3:0e:94:8c:
0f:4c:a4:54:2d:00:c9:c9:c8:f6:d5:b7:90:e0:af:
bf:58:11:73:24:ff:7a:b3:d4:ca:21:83:21:01:bb:
76:bc:91:02:54:a3:7c:13:77:a5:78:a5:77:29:7a:
96:c2:f5:7e:05:e8:c9:a7:3a:25:de:ac:0c:aa:ca:
d5:e0:16:c3:2c:c2:de:1c:2a:98:d6:44:23:89:aa:
17:57:84:ee:dd:fe:91:cc:78:f3:a2:13:39:a5:9f:
7e:7e:ef:3b:76:6a:2a:49:77:03:49:50:68:50:53:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:20:AE:F3:5F:AD:19:28:33:D2:29:49:E8:E6:3F:C4:D8:E2:76
X509v3 Authority Key Identifier:
keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:56:0f:1d:57:7b:b8:40:90:89:7d:15:5a:6f:d5:8e:f4:
bc:d5:b0:80:1b:50:39:48:da:90:09:ec:3f:ab:cc:f5:54:0d:
a5:27:fc:93:c8:41:49:b6:ce:fd:4a:50:24:33:3a:d8:d3:76:
1f:1f:5b:30:b6:e6:83:70:12:5e:55:5e:6c:c4:17:15:01:41:
d5:c5:da:14:d3:34:f1:9b:08:82:9d:2f:14:d5:ec:c6:f4:c8:
d3:3a:44:96:cc:8b:0a:21:6d:7a:81:9e:f9:c3:51:44:f3:80:
0f:2b:7d:9f:0d:27:f5:bf:b1:fb:db:a1:e9:6f:6a:3a:de:36:
e1:a4:35:12:0a:d2:0d:88:5f:91:11:52:c6:5e:d5:53:a8:d4:
3e:f5:76:0c:d0:09:5a:e4:68:ec:c1:1f:2b:78:d7:3c:33:56:
9f:86:9f:d3:b7:24:a7:98:60:bf:02:d2:e3:81:c4:7a:d6:70:
9a:3e:b0:58:84:da:88:5a:25:61:86:10:83:40:00:bc:47:21:
03:0e:d1:a2:f7:98:17:fa:db:1c:3f:1d:a6:0c:8a:94:e2:c0:
7a:c4:f2:80:b9:b4:a9:4f:44:3f:d9:b3:82:e2:54:37:e6:1b:
7c:f8:b2:86:78:a5:52:8f:41:9b:c3:d4:31:29:9b:23:ce:54:
c0:fe:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:16:42 2025 by rpki-client