Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: 5+Am2bhwmjYtNL1siJ4myziBmRI/ilCkuIN6myrM8EQ=
Subject key identifier: 21:A7:3F:EC:16:72:A3:B4:01:C0:20:C9:14:A0:D3:07:89:BB:A9:C1
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01976F6297A92179E79381AA124C7448393F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 17:00:21 +0000
Manifest this update: Sat 14 Jun 2025 17:00:21 +0000
Manifest next update: Sun 15 Jun 2025 17:00:21 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 8T5+y+NH8JRdIDODgbgWYJs5wxg7sFylvd2NM+f+Gbo=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:97:a9:21:79:e7:93:81:aa:12:4c:74:48:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jun 14 17:00:21 2025 GMT
Not After : Jun 15 17:00:21 2025 GMT
Subject: CN=21a73fec1672a3b401c020c914a0d30789bba9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:70:66:26:4e:56:4b:53:8c:95:88:85:fb:
b8:6f:d0:37:df:4f:ed:2b:7a:32:77:5b:f4:10:1a:
fd:91:83:c2:a3:21:9f:b9:f2:79:d3:85:45:ef:1d:
44:8c:4d:db:dd:22:14:65:79:2c:27:cd:4c:a6:e4:
fe:29:55:36:53:f8:02:75:f8:ce:97:ee:e4:23:22:
ba:55:8e:e0:f7:01:85:24:0a:8e:09:47:43:b2:15:
7d:0e:73:03:f8:e9:7d:f7:4f:48:a1:47:31:20:6d:
a8:f5:ee:e2:59:bf:1a:bc:4c:fd:4b:d5:a1:c8:41:
0a:43:4b:ba:23:75:e9:64:f2:6d:2e:22:d1:54:46:
18:23:22:99:d2:06:4c:e4:ae:fc:94:da:c7:2d:e0:
d7:1c:4f:46:50:4d:63:ab:63:a7:1c:26:17:09:7c:
b3:34:43:ac:05:b8:5c:42:0f:1c:95:d1:20:4d:c2:
16:6b:b0:fa:b6:04:b3:dd:a6:e1:a1:06:9a:0f:c1:
cd:4f:8e:15:5d:0d:f9:0b:20:12:bd:5d:d2:5c:03:
62:50:0b:41:06:89:d6:ed:d7:8d:72:c9:b1:ac:91:
32:83:9c:7a:10:bc:87:9c:ab:f6:f2:3f:ea:09:8b:
9b:d5:a2:9f:8d:5e:26:0e:5d:cd:c8:ce:ef:c8:ac:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:3F:EC:16:72:A3:B4:01:C0:20:C9:14:A0:D3:07:89:BB:A9:C1
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:4d:f4:48:73:5d:f6:07:0f:fa:11:6a:02:b5:65:1b:07:
9e:c8:b1:00:1f:a2:52:35:a8:3c:e2:4f:f9:90:e2:2c:0e:e8:
5d:30:81:53:53:c2:62:0f:96:09:4a:b4:d9:94:ef:cc:ff:21:
8b:b9:83:88:c2:0e:43:e6:c7:a3:13:21:b6:f6:18:a2:08:b5:
57:1d:2a:8f:8a:4f:7a:b4:5e:04:61:f5:53:b2:e6:15:c0:94:
bb:83:d5:24:cb:bf:c8:90:95:21:ce:32:c0:25:a9:06:7c:34:
1b:4a:58:60:d3:38:47:68:38:df:50:1b:0a:3b:5f:b2:8a:07:
99:e8:39:35:a3:c4:11:f7:a1:d7:65:50:3d:07:67:08:a5:9d:
38:78:34:53:6d:ff:68:9c:3a:6d:4a:52:aa:0e:33:75:50:7e:
78:bc:bf:10:6c:2f:c5:e1:3b:90:d9:c1:eb:ef:15:c9:3e:4a:
d8:b0:20:18:f7:18:b2:90:b2:a1:2f:12:03:82:13:b7:e8:2b:
43:53:a0:dc:3f:90:86:13:75:2d:48:dc:44:20:10:91:08:7d:
c8:f3:a5:ad:4f:80:c1:39:ee:7c:ad:92:62:6e:fb:2e:28:79:
2f:9e:33:d0:bb:12:74:ce:ca:81:5c:5c:ad:ad:d9:a9:92:09:
10:ee:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:27:50 2025 by rpki-client