Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: ifZEljSdhH/SmajbUFaz/KxLHxjMYcxeNb5/enayVZM=
Subject key identifier: 45:F5:0A:35:8C:07:57:06:3E:1E:05:42:2B:4A:B8:A2:68:A6:57:04
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 01976A05F8654B40255FDE556CD1B89E741D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 16:01:05 +0000
Manifest this update: Fri 13 Jun 2025 16:01:05 +0000
Manifest next update: Sat 14 Jun 2025 16:01:05 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: JkAxK6GUSpRNHexJ/phmJ7PwwpQrF7ZPA5qEVtnlaeM=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:f8:65:4b:40:25:5f:de:55:6c:d1:b8:9e:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jun 13 16:01:05 2025 GMT
Not After : Jun 14 16:01:05 2025 GMT
Subject: CN=45f50a358c0757063e1e05422b4ab8a268a65704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:3a:1c:3d:e4:b7:ca:ba:f7:c3:3a:65:2f:
2e:f9:19:9c:d5:c2:97:07:19:bb:71:7b:67:21:2f:
c1:b5:09:69:8d:c2:ea:82:5e:07:80:2e:63:25:0a:
51:cd:f3:8a:6d:72:fb:f7:b2:bd:40:91:ca:87:b3:
c5:b1:9a:22:d2:fc:a6:81:a6:96:91:45:27:4e:69:
65:fd:8c:14:60:a7:41:4e:3b:12:78:1d:11:5e:f3:
60:aa:22:3d:a3:e2:03:46:f9:d8:0f:53:29:0e:c7:
52:36:49:f5:09:fe:64:a8:42:99:5c:33:90:9b:18:
9a:cf:dc:05:94:0b:24:4c:3a:ae:5d:52:ac:1a:ed:
5d:8b:fa:a2:b9:e4:92:8f:d2:a5:1b:c4:cb:af:98:
75:ab:99:b2:dc:08:99:4d:ee:8d:3f:95:4f:73:4f:
ab:55:fe:33:db:72:84:c4:1f:d3:90:6c:ee:46:3d:
e0:ac:ff:da:98:cd:28:7f:13:ab:b1:54:72:bf:b6:
bb:f3:54:1d:66:fa:f7:ce:34:ae:f3:2d:e8:eb:86:
40:6d:1b:36:f9:cf:9b:7b:e9:44:d3:fd:3a:92:65:
11:ec:c0:32:be:9b:a8:6f:15:5c:30:5b:7a:64:87:
a5:4a:a1:8a:af:ab:22:5c:5e:7e:f6:11:96:e8:f1:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:0A:35:8C:07:57:06:3E:1E:05:42:2B:4A:B8:A2:68:A6:57:04
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bf:08:7d:50:3e:8d:d6:45:d8:25:62:14:f1:5f:8c:fa:7e:
bc:b5:1c:96:dc:a1:42:6b:0d:29:43:30:e2:fe:4e:7a:03:eb:
95:ea:e6:45:c6:08:b3:45:3e:9e:4c:61:c3:0d:3e:7b:a8:6e:
12:72:d3:8c:d7:4a:18:9a:6c:7e:29:a0:cf:82:f4:72:35:9c:
b0:c6:93:be:82:15:8c:3c:fa:6c:2e:21:04:a6:41:cc:43:f2:
88:4a:af:5a:99:5b:da:f9:81:f3:64:1a:ab:3b:54:dd:d9:c3:
40:27:73:6a:2a:04:c8:63:5c:64:97:0f:1b:75:dc:d0:99:b0:
e1:34:9f:99:75:1f:48:f4:b7:7f:15:a6:d6:c1:72:bf:0c:86:
c3:97:3c:03:88:f4:09:39:e6:7b:b7:78:04:55:e5:33:16:ae:
68:73:6d:54:4c:04:da:a4:b7:6a:10:78:36:65:b6:a4:90:79:
18:a6:2a:40:59:c8:35:2a:8e:a8:ae:32:76:62:dc:36:fa:17:
9c:82:23:58:16:94:76:ca:75:77:87:8c:2c:6e:d4:09:c9:5c:
d6:a8:29:0f:e0:d6:76:6d:d3:a3:97:7e:09:96:42:1e:82:03:
c0:89:8b:f4:2b:1a:9c:50:55:07:18:40:3d:9e:7f:ec:e0:1d:
fb:96:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:15 2025 by rpki-client