Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: C0BTlQSfPIO9d77RrEfd55Hy8p6xackENJRam2ymYIg=
Subject key identifier: 5D:CD:A1:A9:E4:95:92:96:F7:B2:66:CD:B0:13:2C:F7:08:ED:07:F7
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 0197B8FCEFDB7539C57220BC6645CCB49964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 040C
Signing time: Sun 29 Jun 2025 00:01:13 +0000
Manifest this update: Sun 29 Jun 2025 00:01:13 +0000
Manifest next update: Mon 30 Jun 2025 00:01:13 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: oGgWSmVpktXzwOQOUDFca5LFvoOnIIL+wgwx7BBTaRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ef:db:75:39:c5:72:20:bc:66:45:cc:b4:99:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Jun 29 00:01:13 2025 GMT
Not After : Jun 30 00:01:13 2025 GMT
Subject: CN=5dcda1a9e4959296f7b266cdb0132cf708ed07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:71:d8:74:f0:10:93:54:72:6d:5a:2c:02:
bb:ea:67:83:b1:99:54:0e:c8:d0:21:17:b6:b6:91:
f6:c0:13:3b:da:e5:db:16:36:2d:c4:e3:4b:30:d8:
11:1a:a4:59:24:aa:06:48:80:bb:1e:aa:ee:72:76:
92:d1:0c:52:4e:17:0e:d4:36:fd:79:8f:7c:ca:53:
b6:fc:a9:d9:98:92:9a:c1:5b:c1:b5:66:87:0a:27:
7c:57:f3:80:43:2d:71:a3:0a:b1:21:b6:dc:b8:fc:
dc:ed:ac:9f:52:fb:c4:03:33:a0:d9:0a:4f:b3:61:
f2:5d:2b:47:b5:07:8e:7e:e0:f6:4d:5a:8b:94:89:
cf:08:6f:4f:4d:51:eb:94:bd:06:9c:00:f1:4e:ba:
2f:fa:fb:88:67:fd:5c:27:4e:e5:e7:2a:11:eb:d1:
42:18:fa:1a:28:1e:81:82:1b:4d:23:85:f8:66:79:
c1:56:48:2f:54:35:fc:1d:e7:34:b9:2d:05:dc:99:
d8:d0:ed:5c:ff:4f:40:72:7a:29:f3:9f:48:f0:55:
80:58:3e:e9:8f:06:b6:8b:b4:65:24:1f:16:08:73:
65:45:3a:56:43:78:b4:49:97:fb:1c:40:96:5c:c5:
78:cb:75:89:d0:48:e6:d2:7b:9a:e4:c7:08:5b:6e:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:A1:A9:E4:95:92:96:F7:B2:66:CD:B0:13:2C:F7:08:ED:07:F7
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:f7:19:7e:f8:90:4a:bc:f4:20:ce:ff:6a:6e:75:08:9b:
37:72:c1:ba:66:58:a5:7d:00:95:74:f4:fc:b1:1a:ad:6e:ad:
1b:20:20:74:58:1d:54:fe:64:59:a4:90:eb:aa:74:cd:be:5c:
84:dd:8e:26:ef:83:86:0c:0e:eb:c7:68:fe:12:51:09:84:94:
82:e5:9a:24:b6:e3:e3:d5:4a:44:d2:f4:8f:a1:ed:47:d9:d6:
e5:d6:45:2e:52:04:c7:cb:e4:d4:90:36:9b:67:24:8f:19:9a:
0b:44:ef:95:b8:99:35:8b:61:cf:e8:f8:fe:c9:b2:ed:eb:92:
ab:56:05:44:08:84:92:69:99:94:b4:3f:9b:f7:c4:96:f2:22:
04:e4:bc:95:cd:ee:dc:df:01:63:5c:69:8d:78:42:b2:dd:5d:
f8:42:60:b8:68:ab:7b:20:32:3a:90:48:2b:ed:60:67:98:7d:
e4:cf:5d:0a:6b:68:bb:40:1c:17:7d:83:f1:f0:ad:54:d1:30:
59:3a:e7:18:0e:56:84:bf:e0:93:8f:8a:f1:b9:4d:10:60:53:
b5:e9:0d:81:96:cf:3b:73:73:1c:bb:92:e9:70:90:b4:43:de:
9c:3f:bb:28:d9:7c:2e:8a:99:d5:28:3b:f9:1f:78:8b:e9:70:
77:44:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:09 2025 by rpki-client