Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: KG8I4D8H9WngwtJFRjObimsnHEsZSyc/VnYK6Nkp1hU=
Subject key identifier: 9A:27:35:C9:1F:B4:58:AE:8C:53:64:89:64:A5:42:EE:84:38:57:12
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019776E5B45DAA53E81C2C5D4B621AA42098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 15A1
Signing time: Mon 16 Jun 2025 04:00:54 +0000
Manifest this update: Mon 16 Jun 2025 04:00:54 +0000
Manifest next update: Tue 17 Jun 2025 04:00:54 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: D0s5LlZbTHng9eiOYJE+Jm6yDJ1xgrrhGwJamD03Gos=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:b4:5d:aa:53:e8:1c:2c:5d:4b:62:1a:a4:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jun 16 04:00:54 2025 GMT
Not After : Jun 17 04:00:54 2025 GMT
Subject: CN=9a2735c91fb458ae8c53648964a542ee84385712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:d8:6c:84:f4:85:0e:b5:0c:4d:19:dd:25:
83:d6:4d:0d:34:18:b5:40:f0:16:6e:d0:b6:97:ac:
47:1d:1e:c5:f5:0a:d8:4c:87:db:79:6f:ad:3b:74:
64:dd:b4:6a:87:8f:e9:14:26:6e:14:1e:8b:b7:57:
0b:97:15:9a:35:17:cd:5a:9c:4a:27:78:53:90:fa:
cf:6d:82:e7:c6:36:2d:4e:51:4d:2f:52:a6:7f:a3:
61:ff:c5:a1:d5:04:19:fc:a1:28:9f:1e:68:17:34:
76:ab:6d:ae:c7:32:d2:2f:db:db:99:6f:00:2f:78:
a7:b9:1a:09:90:53:84:d8:ce:29:a7:c8:9d:e1:ea:
90:9a:b5:30:9f:00:fd:04:e6:cf:b8:77:e4:d9:d6:
0c:bb:a1:14:bc:47:eb:96:3d:2c:d6:0c:e4:ba:a4:
bc:2f:bc:21:14:e7:23:14:fa:bb:aa:f9:5c:11:6e:
cc:ea:0f:d3:00:ff:c0:95:07:3b:5a:d8:2d:ba:8f:
6e:cc:87:5e:92:40:14:e3:f8:c2:5b:61:53:76:2a:
7c:0d:c8:da:c7:06:01:fa:5e:e3:69:7d:fc:82:20:
00:b6:8d:47:7b:d0:23:f9:8d:11:be:2b:cb:f9:50:
87:35:1d:5c:bb:b6:56:cd:56:b9:29:72:8c:0f:99:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:35:C9:1F:B4:58:AE:8C:53:64:89:64:A5:42:EE:84:38:57:12
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:09:9f:cf:d1:05:c4:05:b3:28:1c:1f:22:1a:eb:56:c3:d7:
e9:22:a9:fa:56:70:3e:63:75:43:d7:bd:3f:2d:cc:e0:82:2b:
39:7b:48:17:c4:3b:5d:a1:67:4b:a8:89:13:63:f5:c6:cf:a5:
a0:1c:c8:40:83:f1:c9:ff:35:d3:0c:fe:72:a6:09:ab:62:f4:
29:82:e1:3b:ed:c9:59:4c:0d:4a:36:a4:07:c3:e9:1e:ec:e1:
a8:02:e2:15:12:f0:b4:51:4a:cc:62:df:52:63:9d:82:bf:b6:
2a:84:db:e2:e7:d1:e9:79:17:f3:44:2b:f3:83:d1:6a:2a:98:
e0:7a:f2:b9:da:f4:be:34:7a:09:9a:5a:42:ea:35:20:cf:80:
d5:a5:b7:30:27:e4:30:36:fa:ec:cd:5f:49:07:e3:c9:55:9b:
4c:27:c1:f0:a1:f2:80:33:cb:80:98:74:74:19:83:02:15:a8:
c8:fb:70:13:a0:94:f6:a5:20:7b:1d:6f:15:f1:ba:2e:29:b7:
a2:a9:e6:c2:17:85:1a:b1:1f:da:df:ac:a2:09:8f:fb:71:07:
e9:53:c0:96:49:5a:5e:7a:1e:3d:38:94:4c:1f:57:f1:64:6c:
ab:d5:05:b1:81:76:ff:06:48:98:2f:62:bd:be:94:da:0f:06:
03:02:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:38 2025 by rpki-client