Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: wuByWJfa78jJp7vWOVE/yPahF4O4URz71gg3T81qm+s=
Subject key identifier: 3E:78:5A:A3:B1:CB:CA:51:DD:5D:FA:EE:C9:BC:71:57:18:92:F1:10
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 01978C2359405485DB600C21444225A48525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0859
Signing time: Fri 20 Jun 2025 07:00:16 +0000
Manifest this update: Fri 20 Jun 2025 07:00:16 +0000
Manifest next update: Sat 21 Jun 2025 07:00:16 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: bPfItewQTHYXWq23RwFsySgoY0dBhyw8AorwjsfWNYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:59:40:54:85:db:60:0c:21:44:42:25:a4:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Jun 20 07:00:16 2025 GMT
Not After : Jun 21 07:00:16 2025 GMT
Subject: CN=3e785aa3b1cbca51dd5dfaeec9bc71571892f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:f6:d4:11:8d:4c:b3:1c:e9:79:ba:ff:a6:
24:0b:98:fe:79:82:fd:a5:22:92:08:66:0a:14:d1:
1d:e2:ae:4a:bc:f8:aa:59:fd:8a:67:94:23:e5:d5:
fd:53:8f:6d:c6:7f:ba:5f:c3:56:dd:6b:f4:98:f1:
8b:ea:33:90:9c:a7:1a:12:2a:04:83:18:2b:c9:8c:
bb:dc:39:d9:34:87:93:99:4f:bd:b7:da:ef:1f:88:
6d:73:38:4f:0f:cc:23:14:8e:89:6e:09:91:da:2c:
0d:f4:ba:6f:04:4e:3a:55:1f:8a:23:51:76:fa:8b:
05:86:a4:06:15:2c:fa:79:47:01:f1:00:25:32:7e:
e3:82:09:d0:e9:46:8a:59:f9:b3:52:46:84:bd:75:
75:c8:ec:a6:67:8d:20:ca:b4:00:05:c6:30:6d:8a:
15:71:dd:71:a8:f9:3e:1d:5d:8d:f1:35:98:4a:11:
f0:d5:5b:15:21:7e:f3:ff:98:ab:34:95:4f:cb:23:
bd:29:1b:0f:ba:26:33:20:38:47:17:7c:e2:93:e2:
95:9d:c9:d7:aa:53:18:87:95:73:6e:cd:7c:bd:9a:
67:69:94:68:fd:a8:94:54:d8:f7:ba:39:d8:68:ef:
5f:71:5a:74:a9:56:f1:00:27:ec:b5:fb:29:a6:53:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:5A:A3:B1:CB:CA:51:DD:5D:FA:EE:C9:BC:71:57:18:92:F1:10
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0c:46:3e:a5:9e:a2:3b:1c:52:55:45:34:65:09:da:ba:ea:
03:78:1e:5e:a1:23:b1:7a:b4:79:3a:c9:98:80:f6:86:e3:7c:
5d:aa:86:aa:e3:c5:4b:0d:37:99:36:62:1a:22:86:24:91:51:
c2:0d:04:a6:2b:3e:47:44:64:3d:42:5e:68:fa:43:97:35:36:
04:2c:4a:b0:37:9e:41:ee:0d:9f:f6:40:3d:de:ec:de:ac:47:
dd:48:a9:9c:f2:cc:e2:d0:3c:50:0a:94:32:bf:7b:76:ce:29:
52:d7:ae:fe:79:a5:55:57:fe:7a:6d:b7:8e:1d:d4:79:2f:3a:
cb:36:b3:71:a2:d8:ef:8c:5f:b1:de:46:73:86:a3:50:ca:43:
07:8f:74:1e:c1:de:df:1b:bf:98:f0:e7:ca:cd:04:e7:51:48:
04:08:09:8d:26:c4:39:a6:bb:4a:54:90:0a:df:be:30:31:4b:
4a:25:1a:52:bd:a0:3c:01:df:10:f5:22:8b:1b:86:f3:0e:f6:
ef:b5:00:14:48:4b:bb:58:6f:bd:ca:56:12:b0:5d:39:c8:04:
bf:c9:8e:47:3a:ef:bf:0c:67:e8:70:d7:fe:77:8e:53:5b:5c:
88:9e:fa:09:02:73:94:4e:eb:64:4b:22:61:70:04:fe:72:e0:
dc:3a:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:57:22 2025 by rpki-client