Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: QjmsdWl2YfRlHfQfxpXFKG/V/7C72d+zBh1prtOUYkE=
Subject key identifier: 43:D7:D9:CA:C0:F0:54:19:9F:40:6E:AE:A5:3D:9C:2B:34:57:44:E2
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0197BAEB81BF4A2B2D5F69D171886798A87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 029F
Signing time: Sun 29 Jun 2025 09:01:25 +0000
Manifest this update: Sun 29 Jun 2025 09:01:25 +0000
Manifest next update: Mon 30 Jun 2025 09:01:25 +0000
Files and hashes: 1: ZmYRAbce4_b3Y3MTGH_-5YNd44M.roa (hash: gg6NDZsFuQEdCclcvQPF1go9hrM2TiRZm2hNjCEJSm8=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: O1D/TzhdMnnEZpdwuSRIaybXNCdBQzSyaUGqUjNyzCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:81:bf:4a:2b:2d:5f:69:d1:71:88:67:98:a8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 29 09:01:25 2025 GMT
Not After : Jun 30 09:01:25 2025 GMT
Subject: CN=43d7d9cac0f054199f406eaea53d9c2b345744e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:0f:ae:18:2e:96:2f:62:d1:99:35:d0:ac:
6d:fc:85:24:0e:83:83:3c:07:de:ad:47:ad:1f:4a:
81:e6:5b:7e:a4:fa:54:6a:85:b9:29:ef:95:f7:63:
b3:10:77:68:d7:04:62:03:6c:be:6c:31:77:1c:ae:
59:8c:be:cb:07:91:6c:b5:3e:1b:d9:0f:f3:d3:a6:
04:75:cb:d2:49:e3:2f:c9:ca:ec:a2:0a:1a:3c:af:
89:22:ef:97:e0:a6:bd:01:b1:a4:de:78:67:69:6d:
b2:04:23:86:67:de:3c:11:f6:60:ef:9c:b1:1e:31:
3e:e0:b1:0e:e2:d9:5b:c6:04:2c:b8:fd:4a:06:99:
cb:7a:1e:cf:1c:e4:21:6b:49:37:7d:53:e6:2d:98:
6e:40:3e:f5:10:6e:49:33:9a:ae:e5:db:ab:98:9a:
c2:62:23:3e:84:3c:1f:6c:f3:83:e0:2c:54:81:4d:
be:7e:9e:f6:ab:db:67:54:68:0e:55:92:b2:64:94:
bf:75:0e:5f:57:f8:cd:9c:21:92:bc:6c:eb:ed:f8:
55:7a:36:2b:d1:c2:7c:fd:b8:6f:19:04:51:cf:7c:
f6:24:5e:00:f9:44:93:e8:58:b4:f9:79:c4:76:b1:
f6:38:75:f1:89:d9:ad:fa:48:be:cb:30:5e:88:95:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:D9:CA:C0:F0:54:19:9F:40:6E:AE:A5:3D:9C:2B:34:57:44:E2
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:2c:da:7f:50:f5:c6:cc:94:90:79:b4:79:a2:73:d0:7c:
99:08:b2:02:9c:78:2a:c4:8e:f3:bf:c9:e4:2a:47:30:e7:99:
7b:db:83:ab:46:e4:9c:55:33:0f:ad:04:ca:1e:df:23:78:fb:
5f:37:51:02:aa:5c:ac:37:d5:30:e0:0b:5e:49:c9:ec:80:41:
7e:11:ed:aa:59:71:f6:eb:00:aa:c0:a9:1a:d0:bf:98:1e:e6:
ff:f7:8f:6a:c2:aa:5f:00:00:32:01:1b:bf:4d:01:cf:a3:ed:
49:6b:ed:44:39:af:18:5f:e0:0f:be:a0:0d:42:80:0e:2e:cf:
33:53:fe:1b:a0:40:07:55:e7:4f:58:b1:99:b6:78:72:b5:85:
25:14:db:1a:45:e3:da:3d:9e:82:12:2a:4a:b3:96:a4:2d:77:
0a:8f:16:49:bc:7d:1d:00:1e:de:4d:90:56:a6:67:d3:6b:c3:
63:c0:be:3d:53:04:19:17:b1:9e:b7:ac:2b:0c:a9:21:75:ed:
86:74:5e:ed:fd:1f:b0:39:5e:54:dc:61:42:70:6e:59:79:18:
15:98:5f:ec:4f:a4:b4:9b:6c:f8:aa:38:70:d5:e5:35:00:51:
ff:84:e3:fb:9b:04:10:be:00:a5:f0:8d:6c:19:2d:ca:c0:b0:
e4:81:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:30:59 2025 by rpki-client