Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: 36rsxa3jJbUI3wYRNMnchHHsuU9uX+KIp7pa9K6dikg=
Subject key identifier: FA:2A:94:9B:BE:43:8E:D2:A9:85:17:CE:D8:0A:57:1E:EA:01:A2:46
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019768851E845903907DAD8EB14C69428F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0CF3
Signing time: Fri 13 Jun 2025 09:00:43 +0000
Manifest this update: Fri 13 Jun 2025 09:00:43 +0000
Manifest next update: Sat 14 Jun 2025 09:00:43 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: sSLhT+ntOMSmj2pvQ80HWhJrQJ+uiBFMU1vxU32C68A=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:1e:84:59:03:90:7d:ad:8e:b1:4c:69:42:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jun 13 09:00:43 2025 GMT
Not After : Jun 14 09:00:43 2025 GMT
Subject: CN=fa2a949bbe438ed2a98517ced80a571eea01a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:f4:b7:d8:ba:f2:79:68:e5:80:45:90:d8:
59:ff:49:70:f7:ad:25:79:6d:de:b5:32:c4:09:82:
0c:19:2c:f2:98:4e:db:06:c8:31:28:88:39:80:eb:
e7:c5:e3:e2:d0:dc:80:fb:45:29:01:36:98:82:b0:
ac:e9:1a:51:a6:ff:cd:df:83:98:e3:13:0f:57:5b:
5b:2e:9f:5b:5e:44:79:93:3b:6b:c9:d1:6a:d8:4b:
0b:90:b8:92:9a:41:0b:ef:23:05:53:4a:f0:fd:3c:
cd:88:df:2e:27:9c:35:c6:e2:53:e1:c2:47:e3:94:
f6:70:10:04:02:94:75:9a:76:20:94:77:45:93:36:
b2:08:8e:f1:86:7c:34:b1:0b:e0:e8:76:5a:05:5a:
89:38:39:1f:44:ea:49:4d:3b:cf:22:86:76:25:d9:
6a:7b:9f:a6:4b:db:25:34:45:80:b3:ea:12:de:a3:
72:cf:21:f8:31:95:de:28:58:54:7e:a9:b9:9f:8d:
8a:23:fe:c0:e1:57:6d:ba:76:23:e4:7a:65:d5:10:
d8:1e:39:ff:0d:9e:9f:9e:f0:b4:bb:8f:d7:6d:00:
0c:62:40:eb:6f:b7:96:1e:4b:19:41:77:26:7e:72:
37:39:4c:3e:7d:6e:62:af:b6:d5:6f:ef:57:30:ce:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:94:9B:BE:43:8E:D2:A9:85:17:CE:D8:0A:57:1E:EA:01:A2:46
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:83:62:af:a4:cb:71:22:20:8b:2a:b9:25:36:ea:02:6f:
16:cc:80:9f:ec:61:89:36:9b:ba:97:4e:c0:9f:66:f7:62:37:
55:61:1a:48:95:31:ca:a4:60:fb:a9:22:93:ad:70:ee:20:4c:
7a:98:2e:c1:60:82:39:df:ee:2e:ee:f9:09:d4:42:fb:a2:58:
ab:08:83:20:a9:36:cd:c3:1d:fd:3d:8c:5a:93:3b:6b:66:52:
a0:78:fb:e5:f1:fd:be:d3:92:c5:06:01:7d:d6:59:7b:07:e8:
5c:60:28:33:b1:b2:fd:6a:48:67:80:67:e5:b2:02:60:6c:22:
2c:df:0a:86:f5:83:4c:e1:be:69:96:f7:c9:f9:54:50:b4:b6:
62:fe:49:33:85:71:13:9c:1c:d3:68:5f:ee:4c:f1:37:d8:49:
c1:c4:0b:54:98:7e:ac:38:7f:c7:1a:d3:f2:3b:22:83:ba:36:
1e:ba:99:40:fe:e5:7b:ef:ea:f0:c5:2f:0b:30:cf:ce:d9:a7:
eb:00:95:af:a7:1b:fd:a6:f2:12:1c:60:ab:f7:70:34:de:9c:
f4:7c:fe:10:ea:64:aa:da:93:0b:5f:a1:6a:ea:4a:87:cd:3c:
a0:57:8d:9b:6d:05:34:7a:e1:3e:f9:0e:0f:54:0d:a6:4d:a1:
f0:cb:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:32 2025 by rpki-client