Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: GHrAzHcdvFKBsEi1T79GorcihdSlW0FFfT8xnuNa5D4=
Subject key identifier: EE:FA:D2:76:69:82:E1:5B:A1:2C:CE:DE:9C:6C:6E:D0:AB:A9:CD:15
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0197B6D73BD788D98B4D52D8A2D5A72F5E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: hWgFntDrE8H29wv6bCk/nBSqPnXkXLLfuY+pFkAekzQ=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3b:d7:88:d9:8b:4d:52:d8:a2:d5:a7:2f:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=eefad2766982e15ba12ccede9c6c6ed0aba9cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:22:24:95:12:f2:4c:c2:5a:2b:53:cd:6b:
cf:f0:64:9a:af:94:4a:9b:95:29:af:bd:32:e9:88:
0c:94:31:2c:df:19:34:2e:8e:57:94:78:65:0c:65:
33:f7:74:cc:df:0c:e8:fe:c4:1d:76:fe:11:d4:bd:
e1:8c:b8:77:0e:1c:e9:19:ec:56:f6:b3:92:b0:ef:
8d:6b:88:4e:11:10:e6:0b:6c:9c:df:c4:70:4e:de:
ac:e2:5c:42:92:05:e0:12:25:93:9d:a3:32:a3:28:
c0:58:a6:ec:7e:e0:89:1f:74:6a:fe:d3:14:8b:a5:
38:19:5f:a7:dc:31:25:4e:99:d7:81:ac:99:e3:30:
c8:0c:f6:90:93:66:43:bc:e3:dd:a1:e3:7e:8a:33:
0e:0e:a1:e7:bc:20:7b:87:8b:7d:12:3d:3f:09:b2:
fd:de:8b:bf:ca:01:c9:1d:91:0e:1d:21:8f:14:2b:
02:44:e9:df:d6:e7:27:fb:c7:91:bc:d2:bf:50:7a:
ac:1a:b6:7e:a3:d5:b0:c9:5a:1f:b1:bc:9d:0d:a2:
c6:b8:cb:92:94:0e:be:cf:9d:0a:42:c8:15:84:82:
0d:79:73:b3:6e:69:10:86:9b:d2:77:51:0b:9c:42:
a4:a0:97:14:4c:cd:ac:cd:2a:a2:6e:2b:35:f3:1c:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:D2:76:69:82:E1:5B:A1:2C:CE:DE:9C:6C:6E:D0:AB:A9:CD:15
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:b5:96:30:bf:91:b0:d2:28:5a:36:bb:7a:47:1c:70:d7:
9d:83:be:6d:fd:fb:ae:3b:35:32:28:ef:7c:c8:fb:f6:42:99:
4a:ec:64:a6:e8:76:f3:0e:07:be:89:7f:21:3a:a5:9b:d1:aa:
1d:ca:98:42:32:1a:8a:f6:31:7d:14:8a:eb:fa:03:5e:69:97:
a5:2e:c2:1e:d3:10:a1:ba:61:f5:ae:02:26:83:1d:db:a3:49:
68:8e:56:d8:3a:cc:49:dc:50:2b:28:c3:bc:4c:e8:f5:c2:58:
9c:6e:fa:44:24:07:f7:0e:4c:31:76:d2:0a:8a:70:06:de:96:
44:f5:7d:a4:9c:d1:2b:19:38:17:9f:12:95:e3:8a:2b:4a:e0:
73:c1:d0:18:3e:6f:5f:84:a5:9c:1a:41:ec:65:24:74:f0:ed:
a0:70:d7:24:26:33:42:cf:3e:4e:d6:51:37:49:01:e5:cd:b5:
1d:bb:ad:8e:74:20:3b:f9:de:84:c8:3b:24:46:74:c5:c8:6b:
e6:db:4c:ec:1c:50:e5:bf:84:aa:bb:97:1e:f8:40:65:87:53:
83:a9:2d:1f:ca:d1:2b:f6:2d:7f:f7:1b:29:58:b3:71:34:36:
ef:64:3d:d4:79:e0:72:1d:ff:26:a1:5a:9a:3d:f6:3c:a2:10:
0d:fd:93:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:23 2025 by rpki-client