Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: ShLVB/8uFwcrYHAR4mpSkX8K84wr24GBAB+QjMnIq64=
Subject key identifier: D6:31:3D:1C:09:CB:D8:69:00:F4:E5:E5:D9:D5:74:9A:F0:96:B4:14
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01976D3E5510C2EA0642E104B7E7B3A507D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:30 +0000
Manifest this update: Sat 14 Jun 2025 07:01:30 +0000
Manifest next update: Sun 15 Jun 2025 07:01:30 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: 2TksJfdXiAp5qMFKiFbjLWZpsw6USHcFmLc68B145ok=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:55:10:c2:ea:06:42:e1:04:b7:e7:b3:a5:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jun 14 07:01:30 2025 GMT
Not After : Jun 15 07:01:30 2025 GMT
Subject: CN=d6313d1c09cbd86900f4e5e5d9d5749af096b414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:67:17:3a:b2:24:57:3c:4f:4b:dc:6e:be:
1b:47:be:d1:19:09:71:76:c4:74:ff:8c:e0:8a:70:
a7:2b:d5:10:8b:9f:41:df:21:01:eb:46:15:13:39:
97:a3:f2:df:97:35:5d:9c:49:8c:3a:ec:f4:01:7d:
8e:b7:b1:85:48:3f:02:0d:89:7e:0e:fe:7d:20:ec:
bf:18:de:c5:ea:71:a2:1a:14:2f:6f:19:d7:66:1a:
42:33:92:f4:38:11:0f:a3:aa:be:66:5e:12:16:76:
de:94:e7:8a:62:7b:d0:c3:6c:f5:6d:52:5d:a9:9e:
83:d9:bc:45:aa:56:8f:65:d5:1d:74:36:27:03:0f:
60:77:a8:fb:48:96:05:6b:a5:e5:41:d9:aa:79:d5:
26:33:b9:4c:91:19:65:cb:7d:a5:ee:d2:d9:ac:9a:
5d:db:80:c0:8b:e2:0b:f9:6e:68:63:5e:25:5e:97:
9d:d2:de:3f:a6:5e:7c:16:e6:47:15:d3:0b:a6:9e:
9a:63:1c:4e:8b:93:fd:9a:70:ae:80:c2:5a:7f:70:
85:89:71:82:6c:e5:7a:2e:05:43:18:32:a7:0a:75:
29:27:4f:85:a5:27:ec:40:22:0f:bb:a9:c8:4a:40:
5f:b6:42:b1:99:74:60:28:6c:36:67:83:9c:38:6b:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:3D:1C:09:CB:D8:69:00:F4:E5:E5:D9:D5:74:9A:F0:96:B4:14
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:74:90:b5:fa:1a:24:97:c7:34:b7:b0:ff:9d:5a:56:89:
a3:ad:18:bc:fe:91:e0:a6:d7:06:93:bc:16:cb:1d:99:8e:6a:
80:b8:78:f3:fe:4e:83:7f:de:35:3e:73:df:a9:5f:49:32:01:
4a:62:66:15:d3:20:fa:20:e5:7d:7c:8d:ae:2c:89:eb:7e:9d:
00:6b:cf:96:43:f7:b9:9e:2c:98:ee:24:30:71:b3:1c:80:fc:
f6:3b:6d:9a:bb:af:39:b5:58:69:c7:64:c6:d4:ce:74:89:a9:
a6:94:43:f6:ac:49:75:d5:4c:c8:17:b1:50:88:9c:d1:42:58:
37:48:32:5d:94:7c:6c:ce:92:4f:fb:3c:22:60:27:8e:de:79:
ec:07:fc:93:41:fc:6d:52:9f:5b:93:f7:57:a7:59:8f:cb:a3:
4b:eb:98:80:2f:d3:08:98:15:4a:dc:5a:2f:1c:0a:bd:f0:3b:
14:c0:f0:31:2c:0d:15:5f:d7:9d:47:dc:70:62:1f:00:31:72:
b4:6f:83:31:50:11:9c:d7:df:b7:a5:d3:1a:56:99:d1:34:1b:
f8:85:48:75:84:d1:14:b7:4e:50:f6:07:64:e4:7a:b6:b2:ec:
6b:42:b7:ca:2c:4c:1e:33:e5:9e:8d:d2:31:d6:94:82:43:71:
2a:d9:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:36 2025 by rpki-client