Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: PbT0dFVGq9DBB+EDFvCNldpSbjuwLRiCwYNrCEa8aVU=
Subject key identifier: 4B:37:73:AA:C3:B0:C1:77:D1:6C:01:C7:2E:2F:90:53:6B:81:E5:48
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01978244B38169F73AB107C3AABDB743CC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 159C
Signing time: Wed 18 Jun 2025 09:00:29 +0000
Manifest this update: Wed 18 Jun 2025 09:00:29 +0000
Manifest next update: Thu 19 Jun 2025 09:00:29 +0000
Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: 2A2K3Qo4Tj/8CiOSYb17ENZ5cbrC/09wS21enLRLL8M=)
3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:b3:81:69:f7:3a:b1:07:c3:aa:bd:b7:43:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jun 18 09:00:29 2025 GMT
Not After : Jun 19 09:00:29 2025 GMT
Subject: CN=4b3773aac3b0c177d16c01c72e2f90536b81e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:04:95:c5:55:d4:65:d4:69:70:f4:ee:31:
75:2d:1f:af:d5:ad:ba:04:79:00:ac:1f:38:a4:e0:
b5:5a:a5:3f:34:c0:c3:df:63:59:43:67:43:e2:68:
ba:f9:79:63:42:d1:9c:cb:59:b1:4a:fc:44:37:62:
00:cd:6a:1e:3d:01:d5:7f:3a:fd:e9:9d:58:06:95:
e4:3c:dd:2d:28:be:54:ef:81:b4:ef:47:8c:b2:e3:
c8:d7:f0:79:8d:6e:77:88:ea:1c:7a:34:13:7b:c1:
7b:ee:f4:de:ae:58:cf:49:23:42:cd:10:d3:f2:0a:
6c:f0:bf:b9:4f:a6:8b:3e:c2:aa:f6:4b:8f:41:9b:
3e:2a:49:dc:12:c7:52:f2:4c:02:2c:16:32:93:5c:
f4:52:d0:17:af:1c:9b:f0:79:b0:92:c9:94:b7:1d:
d3:76:3a:92:d7:83:d3:b2:4f:37:84:c8:fd:0a:39:
48:8b:f9:de:04:8a:99:ae:b2:3a:dc:8d:54:3c:44:
19:a6:0f:1f:3e:62:a6:ac:05:d5:c4:e8:fb:38:74:
67:60:fb:93:ab:4b:a6:f8:1a:b2:a4:d4:9c:ac:4b:
08:26:ac:49:f8:5b:25:f0:25:51:2a:e4:d2:af:3e:
e3:4e:b2:b2:30:e4:66:cd:16:71:56:f0:be:c5:9f:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:73:AA:C3:B0:C1:77:D1:6C:01:C7:2E:2F:90:53:6B:81:E5:48
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:97:19:6a:45:ed:c8:f7:f4:9d:b6:87:5e:95:a5:19:09:
f8:a5:fc:a8:50:cb:1e:a8:3c:8d:aa:3e:30:eb:7d:a1:be:19:
02:56:4c:26:a1:b2:69:5f:0f:51:08:5d:30:5a:64:0b:b2:50:
28:b8:1f:58:fc:82:78:02:0e:9c:5c:14:27:eb:05:6b:91:b2:
5a:b6:55:a9:fe:68:98:89:d7:ec:35:50:f8:10:e2:fa:ce:02:
ba:0a:cb:0c:e7:20:e0:12:b3:76:b9:37:4f:4e:bc:6b:91:9d:
df:c9:c2:76:6c:5f:53:ef:a4:3e:82:aa:a7:c7:c0:c1:8a:25:
d4:53:86:c4:7a:54:92:09:49:7e:bf:6e:0a:16:3a:98:ea:69:
d0:2c:da:e5:81:33:de:90:cd:14:dc:38:d2:33:46:04:94:a9:
ed:0a:6f:6d:96:b3:e3:48:47:e0:de:df:db:16:68:7d:86:43:
3b:db:eb:cf:50:ae:8e:76:71:1a:de:a5:1a:d3:6e:b6:64:eb:
c0:63:8c:fd:b9:43:7d:26:3d:49:7b:09:41:97:48:11:32:ec:
2c:78:6b:2e:e6:1a:85:3f:fb:74:70:ad:f2:4e:ab:f3:8c:3e:
13:f6:11:c3:c1:4f:96:1c:1f:75:91:6d:31:7d:5f:cb:a3:3e:
e9:5f:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:39:46 2025 by rpki-client