Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: v3nifuB35vqkRgO6PYkvQITkyEu9VRixy4Sj7CGXKcU=
Subject key identifier: DF:AE:DE:A7:74:C2:C8:E8:2D:D6:15:D6:B1:1D:A9:1D:C5:30:85:9F
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 0197703F0E73C6676F5239EC15F2C08000A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 21:01:10 +0000
Manifest this update: Sat 14 Jun 2025 21:01:10 +0000
Manifest next update: Sun 15 Jun 2025 21:01:10 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: DmNcDVlFNrWdh144fqMWLGYJ3w3aBRChEebPqhpLHm4=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3f:0e:73:c6:67:6f:52:39:ec:15:f2:c0:80:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Jun 14 21:01:10 2025 GMT
Not After : Jun 15 21:01:10 2025 GMT
Subject: CN=dfaedea774c2c8e82dd615d6b11da91dc530859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:39:a9:d6:02:5f:46:fe:b5:89:15:e1:4c:
7b:7e:bb:a4:80:ce:7e:9a:61:51:10:21:4f:3a:01:
87:a5:ef:60:36:4d:46:96:f9:81:53:80:91:23:de:
1a:6a:4b:e0:41:61:f4:67:1c:62:fd:d9:0b:5a:3d:
57:0a:a0:0e:63:45:d6:41:af:ac:23:a8:c5:63:5c:
d8:ed:b1:55:1e:b7:e9:f5:99:a8:3d:f1:ce:d4:65:
aa:59:91:7b:f7:1a:19:63:0b:99:3b:ba:ba:5c:ee:
6e:e6:6f:e5:8b:5c:0f:33:42:d9:c8:3f:2c:b8:13:
91:aa:87:a4:5f:cc:34:8d:b3:47:27:46:9e:7a:43:
13:10:c6:89:0e:f0:e1:1a:56:a3:29:98:ba:46:14:
9c:69:d7:7f:b8:7c:fb:42:79:91:e7:6d:df:7b:4c:
38:08:ff:2a:1a:c5:34:80:3f:84:94:3b:29:78:15:
21:c0:08:21:c7:5d:37:81:36:2d:4c:42:54:31:cb:
a8:25:e6:49:d2:c4:32:e0:ea:83:a1:5c:37:0a:5d:
68:7d:f7:51:4a:81:f7:bd:b0:ff:ad:62:5e:cf:6a:
93:bd:c7:6a:6a:d6:86:ba:20:77:ab:18:6b:b0:5d:
23:73:8a:72:7b:e8:f7:50:ed:40:74:c5:64:e4:88:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:DE:A7:74:C2:C8:E8:2D:D6:15:D6:B1:1D:A9:1D:C5:30:85:9F
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:bb:32:bf:a6:13:ac:a4:bc:bb:e6:73:95:36:3a:92:c3:
63:34:b9:75:f6:58:93:76:45:8c:b2:a4:1b:fa:d3:57:b1:e1:
20:3c:2c:79:45:60:63:a3:e4:4e:0e:27:88:f1:5a:00:d0:2b:
0a:d2:5d:57:bc:10:46:10:d3:c7:3c:2f:51:1c:56:0a:b6:02:
65:77:dc:67:cf:84:91:1c:a7:79:87:87:6c:ea:c5:3e:d2:ef:
97:9e:6c:f9:0b:19:d3:04:d9:55:3c:60:81:f8:b9:f9:53:57:
b9:f6:09:b7:6b:32:85:01:a6:c8:71:24:89:25:43:17:54:bf:
a3:0e:14:88:3f:8a:59:25:5a:bd:33:24:82:62:ea:95:d0:d5:
15:ed:99:af:e4:0c:4e:a9:8f:ec:c2:72:b5:b6:3e:a2:80:76:
27:b4:08:9e:2e:b2:7d:af:4c:40:d7:e7:68:13:21:d3:9c:21:
a6:13:82:f2:b2:df:2b:7c:38:f9:b7:3a:71:c7:61:c5:ae:9e:
b8:03:a6:99:4f:c5:ae:a5:f1:00:39:e1:ed:81:b4:dc:0e:bd:
f0:3a:d0:3d:90:8a:17:fb:5d:2c:0b:6a:2b:31:08:b2:78:12:
54:cb:85:09:57:b8:df:77:b4:37:8b:aa:2c:91:5e:d7:95:e8:
f1:29:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:06 2025 by rpki-client