Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: JsJyxj7O6gQBGY789t0UbldEyFy6U5P+5RD4S71bRUc=
Subject key identifier: 85:1F:DD:D2:8F:69:49:C0:FD:64:7E:E2:51:6E:E2:A7:C9:07:BD:A8
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 01976D067ACE76DAAD2699F08CE85E0DC4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 0131
Signing time: Sat 14 Jun 2025 06:00:30 +0000
Manifest this update: Sat 14 Jun 2025 06:00:30 +0000
Manifest next update: Sun 15 Jun 2025 06:00:30 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: z0KdJBsNMihNsIbN4mrzM9RcqHVtzntgVXnkxJqI+tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7a:ce:76:da:ad:26:99:f0:8c:e8:5e:0d:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Jun 14 06:00:30 2025 GMT
Not After : Jun 15 06:00:30 2025 GMT
Subject: CN=851fddd28f6949c0fd647ee2516ee2a7c907bda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:6b:28:12:10:2f:48:e3:68:6c:2c:5a:f8:
36:58:e2:25:7c:ae:7b:15:5a:92:c6:03:17:37:e3:
52:f0:64:bd:52:b4:a9:c8:72:93:12:5b:4a:1b:65:
ca:3a:cb:7a:f6:c5:27:09:6d:e7:ea:ee:eb:e3:44:
2f:ff:af:42:5c:1e:86:a0:6b:ac:b6:e6:4f:cd:6c:
47:1b:bb:fd:0c:85:01:9e:e7:1f:cd:0e:f0:ed:33:
1b:85:87:4f:7c:07:80:a9:2b:6e:1a:b5:04:9d:91:
15:3a:85:56:47:32:6c:5d:ad:d0:ec:c1:40:71:bf:
90:41:97:6b:0e:44:1a:c6:16:88:88:5d:2d:4b:10:
23:10:fa:bd:f8:ba:d0:46:3a:96:36:60:34:53:24:
5f:58:e5:ad:65:e1:af:85:e6:10:4a:f7:7b:f5:d8:
8b:5b:35:d2:79:79:68:ee:52:19:a7:2c:80:9b:e7:
47:e1:9d:b9:7e:73:b2:ca:61:07:62:3f:53:dd:92:
e5:60:10:52:ca:84:a9:d8:c0:9b:69:f8:da:2d:67:
36:d0:b1:9e:4a:fa:dc:1c:ed:64:03:91:17:50:7a:
a0:c0:fd:ca:67:a4:a4:ab:c3:4a:38:14:d8:2c:1a:
1f:a3:68:66:14:4d:2b:bc:6b:b9:3b:33:fb:d2:c0:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:DD:D2:8F:69:49:C0:FD:64:7E:E2:51:6E:E2:A7:C9:07:BD:A8
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1c:67:b7:a5:e0:a2:e1:9c:b6:1d:e0:80:76:86:91:e3:37:
19:a9:86:69:a4:93:1c:6b:3b:c1:f7:39:f0:30:5e:bd:66:71:
8d:0d:cd:77:42:50:61:d2:7f:8a:22:41:d3:a9:29:f1:ff:69:
7d:81:70:96:72:88:e1:0e:20:cf:45:1d:b1:f5:81:22:99:bc:
2b:3e:54:67:a7:7b:db:a6:04:ea:56:ea:a3:8c:0a:3f:7d:eb:
2c:e4:0c:e9:14:f5:fb:79:1b:66:ec:6d:cf:ff:ab:b1:6c:a2:
6e:e2:5a:d5:ad:af:22:35:2a:37:e1:73:46:dc:21:cf:a4:4e:
d8:55:f9:5b:e7:4c:4b:0d:97:74:b7:c8:01:54:24:a8:52:6c:
f1:d3:aa:aa:e7:44:dc:cd:8a:4f:c2:d6:fb:19:73:37:f8:8b:
5c:cf:9e:62:53:8c:41:b6:13:9a:8f:a0:df:4f:f9:52:03:89:
55:ae:fb:e5:c0:66:ac:ca:a1:f5:ef:9c:7f:78:67:6a:c8:d8:
cd:ff:3a:a8:d3:3f:08:d4:dc:92:90:49:f6:14:2c:5a:36:35:
38:1b:b3:2e:a4:70:cf:b0:db:5e:05:d4:3e:9d:d6:97:75:c0:
63:26:25:0e:d8:63:74:55:a2:6d:08:79:67:99:e8:c2:bd:56:
13:c4:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:12 2025 by rpki-client