Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: dc1UjjFh92T6bRbc2p+DLESEOZKHAgFzFsxH/cOMVzE=
Subject key identifier: 60:C3:7E:B8:C9:0F:E9:44:85:7A:40:FC:AF:26:FE:DD:13:AC:47:76
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 01977DC3585961C2858E1E35D4A3B57520D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 12:00:43 +0000
Manifest this update: Tue 17 Jun 2025 12:00:43 +0000
Manifest next update: Wed 18 Jun 2025 12:00:43 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: UooQlSXLPLallW/q51GdrPY7ktSrxhxgtALk41+RlK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:58:59:61:c2:85:8e:1e:35:d4:a3:b5:75:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jun 17 12:00:43 2025 GMT
Not After : Jun 18 12:00:43 2025 GMT
Subject: CN=60c37eb8c90fe944857a40fcaf26fedd13ac4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:13:c1:51:e6:df:0b:c4:1f:9a:b8:87:f0:
e1:96:32:e7:b8:53:37:2a:07:f2:37:4d:2d:59:a5:
dd:2c:e5:00:b8:53:b4:f1:e7:b6:b7:b4:19:87:4b:
39:93:38:d5:53:43:2c:32:be:23:bb:f9:36:9f:7b:
a1:7d:86:4f:e0:a6:65:49:f6:38:74:8d:b4:a9:58:
99:2d:48:07:94:0e:35:2e:10:46:c9:e8:e1:38:5b:
b8:53:09:80:c5:02:be:67:6e:bd:9c:13:3b:b8:3d:
cb:ac:cb:ce:8b:82:04:9e:eb:06:0b:05:63:7d:c5:
ca:94:3d:9a:8b:6f:25:f6:48:07:02:f4:b7:c8:22:
03:75:34:08:9c:dd:0b:7b:b5:98:52:86:74:a4:5a:
9c:60:19:a1:0e:15:31:ee:ff:51:62:e6:5e:77:de:
43:b2:13:f1:4b:e2:3e:47:20:6f:44:17:e0:fc:72:
74:96:89:0a:d8:a5:85:38:ca:b4:53:65:32:cf:3e:
60:03:ee:e7:42:00:7e:3b:ec:07:d7:be:02:2b:47:
7d:68:64:a7:ee:ca:e7:12:2e:fc:07:a2:d8:7f:04:
be:88:88:f1:6a:73:ff:35:0f:ec:5a:4c:00:04:b7:
c6:b3:a9:20:03:33:50:5f:0c:b9:d9:0f:b0:70:8e:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:7E:B8:C9:0F:E9:44:85:7A:40:FC:AF:26:FE:DD:13:AC:47:76
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:90:45:07:b1:1a:76:4f:eb:56:d2:57:1e:d1:48:46:69:40:
dd:20:a2:22:3a:2d:b7:22:4f:c4:11:15:df:8c:52:7c:53:06:
ab:2c:33:ea:52:32:85:6b:72:1d:2b:e7:df:37:26:25:ff:f6:
00:53:b3:f4:c2:a7:01:4b:25:c7:2d:c2:b0:8d:8f:ba:58:8e:
04:1e:08:97:09:c4:98:92:ab:34:81:c7:29:e7:b7:78:5b:49:
8e:70:d5:9d:34:5b:88:f2:08:68:af:67:48:d2:72:b5:78:56:
a1:e3:ac:0a:e1:ca:64:02:0c:42:45:c9:e3:e6:06:d5:1f:42:
5c:8d:cb:fd:6d:c0:53:56:73:94:04:fc:a6:d6:d1:bc:98:d2:
32:73:61:66:32:1e:9c:45:02:41:84:d3:8f:e4:85:5f:3f:0c:
4f:f5:85:e3:41:ab:4d:f9:52:2d:cb:01:2b:a3:7a:e6:97:a3:
73:6f:c0:15:ab:11:37:6a:ed:37:cd:02:d0:f5:f9:a6:38:3b:
8e:2a:8d:28:3d:95:3f:dd:74:b0:c3:28:ca:c8:43:7e:d5:a7:
43:5c:49:9f:e7:ca:b2:d6:04:b5:d8:a3:6b:bc:ff:57:dc:6f:
81:76:8e:bb:b0:5a:40:ed:a5:6b:78:c0:09:dd:fb:a0:30:27:
b2:63:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:23 2025 by rpki-client