Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: okhRfjKL2Bry0g067ZF8t6y6tvsmpNgzclQM7JGQqYI=
Subject key identifier: C5:28:E9:87:C8:D9:9F:41:C9:58:0C:A8:F1:A4:C0:9D:3E:F4:B4:60
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0197688504755BC2A047E98FA1CD2A66407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:37 +0000
Manifest this update: Fri 13 Jun 2025 09:00:37 +0000
Manifest next update: Sat 14 Jun 2025 09:00:37 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: IbWyIjgw+pAiFXvk5QpSNVV/dbPyz85P49xjJPpVhyA=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:04:75:5b:c2:a0:47:e9:8f:a1:cd:2a:66:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jun 13 09:00:37 2025 GMT
Not After : Jun 14 09:00:37 2025 GMT
Subject: CN=c528e987c8d99f41c9580ca8f1a4c09d3ef4b460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:24:2f:de:34:6f:56:8e:8f:9b:bb:81:1c:
2c:57:c8:fc:8e:8b:2b:cf:62:3d:c9:f7:ef:2c:3e:
61:11:a6:3a:d6:ca:c1:0b:92:63:4c:79:0f:98:44:
e9:7e:11:20:35:2b:75:dc:1a:3d:49:d0:ae:e5:2f:
78:02:bc:3e:7c:50:dd:df:23:b8:94:b6:d1:f1:aa:
4c:8e:b0:75:4c:03:8a:1a:a2:d8:ba:3d:31:5c:59:
64:5a:3b:cf:f7:f9:86:6c:08:92:35:97:75:05:cf:
02:24:c6:8d:84:8e:ae:20:8c:25:78:e0:7c:81:ee:
76:f1:ea:ee:73:37:fd:88:bc:cd:43:56:90:f4:d9:
67:36:73:51:ba:6f:9b:a7:73:d8:b7:b8:e9:20:90:
74:76:1f:1f:97:d8:be:32:7c:6e:39:d3:6a:2b:2e:
2a:6c:47:11:43:5e:e5:cc:ec:36:6e:6f:b1:a5:56:
36:8a:33:35:23:da:ce:c8:fd:b2:b2:50:6c:38:ac:
d9:07:2c:2f:2f:70:de:2a:80:e0:a5:19:43:3e:8a:
40:37:df:01:e9:48:68:71:22:c2:6f:a6:a1:78:b8:
9a:f4:cc:0d:10:3e:da:94:35:18:dc:52:8c:b2:6d:
8e:10:50:ff:20:6e:4f:13:80:1a:80:2e:2d:af:7b:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:E9:87:C8:D9:9F:41:C9:58:0C:A8:F1:A4:C0:9D:3E:F4:B4:60
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:51:93:d7:e3:7d:26:d7:6f:1f:05:62:99:d9:dc:04:21:2c:
fb:97:c2:d1:8b:d7:fa:a1:c5:ba:b5:35:0d:aa:c0:6e:4d:32:
df:b2:aa:6b:6b:db:49:67:65:be:04:f1:64:c5:0f:aa:50:08:
69:76:9d:db:2a:31:c3:d1:f3:d1:6f:a4:d7:13:9e:72:e1:08:
e6:5d:19:fd:d3:ad:ca:b1:20:f0:2e:14:f6:12:2d:96:02:80:
ee:aa:86:be:3c:c0:58:0b:69:a7:4b:05:47:e9:56:7b:96:67:
d9:a7:63:64:ae:e2:f9:ad:6d:cc:8e:36:a6:0f:39:20:4c:b8:
1e:a8:26:46:46:d9:22:03:5e:3d:ee:e6:75:5f:21:01:01:aa:
0c:d3:87:9f:ea:64:8b:99:27:45:61:a4:ed:54:72:52:df:67:
72:cd:37:12:01:a4:21:0f:46:d7:05:19:85:c8:ff:ea:22:b1:
fb:fe:3a:b6:be:d8:11:da:e1:5a:25:62:33:49:e6:2c:05:ad:
ea:99:b3:78:63:42:63:2f:75:00:20:23:4f:2a:cc:9b:15:a6:
48:3c:81:7e:97:d5:6e:38:45:72:d6:a5:09:d3:4f:cd:b9:50:
e4:05:83:bc:f3:96:fa:cf:62:85:54:fa:11:a2:69:db:c0:c1:
07:88:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:06 2025 by rpki-client