Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier: 2Y+qEsDFSi+JYeI1TMyRQi32bHgxHwh0nJiMc/4Bs5M=
Subject key identifier: AC:4B:EE:95:6F:93:20:78:7A:8B:17:6A:45:80:13:0B:20:85:B3:29
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 01976CCF7EF2D9D535B2209D5839B51CFEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number: 123D
Signing time: Sat 14 Jun 2025 05:00:26 +0000
Manifest this update: Sat 14 Jun 2025 05:00:26 +0000
Manifest next update: Sun 15 Jun 2025 05:00:26 +0000
Files and hashes: 1: Gb_tS4tDYUhq7ZFBBu6bXOHKxSQ.roa (hash: j+ql1A+cPykDsn/U+bRsvn2rorjyFgGlp+mF0Qt3tRQ=)
2: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: 8KyQMr/9Ka8DlWhAoUehW6tId80w4pLYzApkWogEwMk=)
3: aDocXw9aAWTC2tonweXjSXZoNMs.roa (hash: M6NywDoKFY4uKrDQ3WCmTb7f59Ph9hBt6rzgbYZvGvU=)
4: dqRRF9NrCy7kpjHElym2fRaWWpg.roa (hash: yVbcvUrGd5qHEf8kKaXL1t+AGyhms8ILF9sbmeot86I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:7e:f2:d9:d5:35:b2:20:9d:58:39:b5:1c:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Jun 14 05:00:26 2025 GMT
Not After : Jun 15 05:00:26 2025 GMT
Subject: CN=ac4bee956f9320787a8b176a4580130b2085b329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:0d:3a:20:45:cc:39:4e:6e:dd:db:be:eb:
d3:b7:c4:f5:94:61:73:ab:a7:bb:3f:cd:a0:4d:af:
8a:eb:f1:ee:05:4e:45:f6:7a:ab:39:37:48:1d:54:
c9:dc:76:35:5f:97:00:81:94:8b:c3:12:c5:4d:0f:
15:c0:9e:22:54:14:4d:9a:ab:06:fb:6c:f4:a8:c8:
48:62:f8:42:19:50:9b:2b:ef:b9:81:95:be:9d:a1:
b1:0d:32:24:18:1d:72:7e:55:64:14:bb:bb:e5:7f:
8e:71:e2:7a:ba:39:be:c6:46:9b:34:c6:25:6f:ac:
89:15:57:78:26:bd:e2:8b:bc:ab:44:65:2c:62:29:
0f:98:50:4a:d2:28:9c:d0:28:bc:56:10:d8:ea:b1:
c4:f1:a2:34:84:28:01:3e:b6:5a:29:19:0d:ed:6d:
92:66:33:47:1d:03:9a:d3:88:d7:a7:ab:c6:9a:05:
a2:67:40:60:31:d7:5f:7e:af:ad:7c:b8:64:50:42:
d5:20:ec:a4:e2:30:2d:71:cd:09:78:3e:58:d5:c3:
47:88:9b:5e:8f:b3:70:77:c6:90:7d:d9:06:3e:28:
f7:20:70:eb:d9:72:ca:8d:8a:a7:df:c3:e1:51:75:
f2:e2:c5:d3:57:8d:80:34:a9:2f:4f:18:d4:37:4f:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:EE:95:6F:93:20:78:7A:8B:17:6A:45:80:13:0B:20:85:B3:29
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5a:5e:a4:1f:b4:a8:08:a6:20:fe:ae:db:49:30:60:a0:5c:
4f:ad:70:f8:9b:59:09:62:99:a4:4d:a7:8a:83:f9:75:b4:9d:
67:35:5a:14:2b:f5:ec:64:a5:a2:dd:bc:9d:5b:b6:98:f5:54:
22:58:df:5c:31:75:3f:8a:16:df:90:d2:28:8a:63:90:64:de:
d2:b5:a9:65:cd:4c:5c:fb:3a:29:ec:c0:10:18:d9:f4:82:8f:
f6:5f:c4:ff:89:2f:87:db:0f:9f:e6:2a:2b:89:2b:30:e1:bf:
26:84:13:e2:e1:62:0b:19:0b:95:86:50:ea:d3:60:bd:14:04:
b9:11:a2:20:1d:10:d6:6b:e9:e3:e3:cd:d8:83:35:25:43:2d:
f8:27:b6:60:6b:1b:48:fe:90:96:b0:e8:d7:6e:37:59:3a:e7:
9a:93:b5:dd:7d:ea:f2:09:fe:f8:bc:a7:19:95:fe:de:69:ab:
49:57:6d:05:dd:a2:ac:60:aa:c9:2b:43:c6:3e:7e:2b:be:1c:
3a:62:c9:a8:a2:18:3f:08:7d:eb:1f:5b:44:e7:b7:e8:f9:97:
37:b6:d8:47:9c:6c:45:ab:cc:f0:f7:0f:78:fb:5d:78:e1:aa:
e2:66:85:03:0e:04:af:69:b7:15:06:3b:68:69:59:f6:cf:5b:
f2:44:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:54:59 2025 by rpki-client