Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: De3HHFjrJ5UEX0/J0WIeNwpTawd7pe2r7U3NdBvRBBE=
Subject key identifier: 10:2F:58:D6:E6:1B:F7:B5:88:95:4E:F7:CA:2D:07:96:B3:25:22:A8
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 019783C5D19F11F2BFDE676B02CCD8A470C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 0649
Signing time: Wed 18 Jun 2025 16:01:08 +0000
Manifest this update: Wed 18 Jun 2025 16:01:08 +0000
Manifest next update: Thu 19 Jun 2025 16:01:08 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: vBNqj7m2nnEec+57MaA0MuokrrkhliECJMIaUcWdD44=)
2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:d1:9f:11:f2:bf:de:67:6b:02:cc:d8:a4:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Jun 18 16:01:08 2025 GMT
Not After : Jun 19 16:01:08 2025 GMT
Subject: CN=102f58d6e61bf7b588954ef7ca2d0796b32522a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:06:bb:d0:f2:79:ec:d0:02:13:86:1c:14:
4e:12:d5:13:2e:2b:18:0b:11:e1:61:bc:8b:61:4b:
92:38:09:5f:8b:54:e1:99:e9:7e:c8:f2:6c:96:cf:
dd:a3:25:df:97:5d:2d:f0:e0:f4:2b:3b:76:84:0d:
da:18:5c:19:52:62:3d:b5:4e:09:d5:78:1a:9c:f8:
be:e2:01:7e:fc:91:6e:21:82:26:dc:61:95:ff:02:
71:cc:4e:98:34:9e:7e:f8:b6:90:f7:f1:df:de:24:
68:06:12:a9:dd:b3:19:c0:70:0e:89:c4:37:9d:13:
11:f8:34:3a:ee:79:12:a1:e0:66:8e:bd:17:f2:6a:
ec:da:69:d6:d2:32:e1:de:fb:72:f9:4e:7f:80:37:
a9:c7:46:b6:ed:7e:c4:25:5a:ae:3c:f3:74:77:08:
39:1d:8b:91:df:62:af:17:a6:8b:14:32:0f:20:b7:
5e:fd:eb:ef:7f:6b:78:15:aa:10:cc:91:92:3f:e6:
02:5a:27:ff:87:64:32:41:b0:11:5c:bc:28:c7:ef:
96:6b:ab:d8:ac:4a:b7:c8:01:3a:98:56:95:bd:93:
59:9b:7f:08:19:4c:00:e1:47:3f:29:f3:a7:9f:25:
78:32:88:c5:2e:fe:bc:42:31:e1:ec:0b:45:5f:ca:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2F:58:D6:E6:1B:F7:B5:88:95:4E:F7:CA:2D:07:96:B3:25:22:A8
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:60:31:b0:f7:6b:c2:58:3d:cc:88:df:6d:03:0a:06:4e:ba:
e5:b6:6f:4f:14:be:f7:33:2f:27:2e:72:a5:15:e0:40:83:0c:
66:82:e5:53:bc:98:d8:9c:ab:5c:de:3d:13:25:b8:d3:01:ba:
45:4d:92:99:c2:f8:f0:cc:0b:31:cd:33:98:78:41:1c:12:bb:
ef:76:af:0e:3b:6b:8a:1a:80:d8:31:7e:8b:65:97:b7:66:9f:
31:fb:9e:47:5e:05:4f:b2:c5:c1:af:7f:48:96:c6:f1:6d:8a:
1e:2d:f4:9a:62:24:4a:d3:ef:6e:f4:8b:47:ea:3e:a6:d3:97:
20:c6:18:b0:95:a8:0a:b0:42:1e:50:88:c9:57:8f:6c:b8:3e:
a2:77:a7:5d:d5:57:97:24:14:ee:9f:33:82:10:65:23:a8:f9:
39:fb:da:a6:7f:0b:a0:ce:fe:2d:74:22:32:ad:09:8d:59:fb:
82:10:d1:9e:7d:9a:20:a1:aa:1c:e9:d6:5c:89:4f:25:6b:a3:
65:10:ef:8e:f0:07:70:56:0e:cc:44:90:f9:7f:07:6b:34:4d:
b5:c7:dd:60:fe:5e:e1:d5:f7:b2:73:54:94:0d:61:cd:35:32:
7e:40:17:45:19:b3:6b:ad:90:14:c2:79:dd:5d:e2:3d:55:f7:
0a:c0:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:09:17 2025 by rpki-client