Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: VroymBSayjvdf5pyUuY0QOHSQhCUmyKRk0TdW9u2q+I=
Subject key identifier: 8B:4C:56:99:3F:BB:46:14:E5:A5:B8:45:C5:BD:27:6A:E2:DD:DA:44
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 0197B632D261AFC0FD400147973AF0EF2938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 0881
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: dXO2xP+UQ9RewkRunhVkKEKxfLJs32fWeXbUJYOl1iI=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d2:61:af:c0:fd:40:01:47:97:3a:f0:ef:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=8b4c56993fbb4614e5a5b845c5bd276ae2ddda44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:33:6e:5c:58:a6:36:0e:36:17:fa:ad:ca:
78:4f:bb:07:c8:9d:c8:ab:ac:9f:d6:6a:6d:5d:b1:
7e:2a:94:94:4c:e8:88:bd:f0:0a:25:90:55:c8:ca:
e1:c8:b3:2d:fe:5c:66:3a:10:5f:d6:11:39:de:bc:
c1:a0:c1:46:c5:32:e3:19:5f:84:57:e0:af:a2:2d:
aa:2d:3e:53:b6:6f:1d:80:8a:bb:65:7a:fe:72:2f:
53:53:1c:90:c9:ac:87:1b:1b:e3:44:a3:20:63:01:
c8:df:d1:19:cf:2c:4a:68:c3:22:8f:6c:91:e7:06:
a2:91:f7:d6:31:6b:70:3d:5e:98:45:34:42:b1:b3:
d6:c9:a2:09:62:02:1a:f9:8d:e7:2f:fd:d3:6c:f2:
b8:58:1c:31:88:53:b4:5c:d7:b3:81:cb:0b:1a:e9:
4a:6e:d8:25:45:99:9b:56:e5:6d:ec:64:47:a9:4d:
71:91:d5:94:ef:f3:b3:7c:bc:75:31:18:81:16:8b:
9e:46:62:57:2d:3d:5d:ab:6d:c8:ca:fc:31:b4:49:
50:37:50:34:88:5b:c1:88:31:1c:5c:ad:3b:9a:eb:
1a:31:1b:40:8c:0f:0b:85:99:ad:63:e8:2e:21:d1:
a3:1e:e0:d5:15:82:a8:88:ac:cd:60:5d:64:d9:92:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:56:99:3F:BB:46:14:E5:A5:B8:45:C5:BD:27:6A:E2:DD:DA:44
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:60:8e:59:fc:78:d3:87:bb:b4:08:13:7d:a8:57:8e:04:
88:48:00:96:d1:f3:ef:6b:b8:75:6a:b9:8f:83:23:07:56:1e:
f6:40:30:ae:ec:fd:75:6d:41:09:c3:07:6c:0c:b7:52:4a:91:
3f:4d:d5:1e:83:02:b1:3c:16:d0:34:ed:52:99:32:f1:05:15:
f7:f4:76:28:a7:00:f4:47:aa:48:5f:55:80:5e:61:b5:21:73:
40:a8:f4:c2:c9:bc:aa:30:58:5f:27:34:bb:23:c9:ae:22:f1:
bc:f8:eb:a8:25:24:9e:87:ae:93:5a:35:b9:bd:d5:a6:17:85:
6a:c0:f0:4f:14:d2:52:a9:7f:59:2d:d8:f4:35:ae:f7:42:86:
a0:2c:b3:49:4f:9b:c4:b1:9d:c2:ac:d6:49:75:32:63:e6:03:
7d:f7:32:25:34:c2:bf:f1:6b:90:78:9d:ce:94:ec:34:b4:af:
01:1b:f7:c1:80:d2:40:35:87:eb:4e:86:31:d6:73:3f:25:b9:
2f:92:15:3e:d3:6d:1a:70:fc:35:59:58:7c:ab:ea:df:82:f9:
10:b3:7f:47:2b:87:8a:f2:33:dd:da:c6:69:d3:da:5f:7d:b1:
7c:2a:54:19:35:98:8b:32:ca:0c:56:72:0b:8f:1f:41:77:8d:
82:25:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:18 2025 by rpki-client