Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: ZG55/fsS5DSd26j9FjFNdpvXYs4LB97EeRML9xUBtPI=
Subject key identifier: 88:66:A8:87:7B:F9:73:EB:53:7A:BB:2A:0C:28:0A:97:DE:D7:AC:FF
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 0197B6A0773FA61759DA8AB9D06BF85D7DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0D81
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: j184gVcbH9eNIxPFyWe/nNhpDHjDf8ldHSGcQPLXlOo=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:77:3f:a6:17:59:da:8a:b9:d0:6b:f8:5d:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=8866a8877bf973eb537abb2a0c280a97ded7acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:83:c1:49:0e:d8:e4:ef:12:0b:68:58:b0:
cf:a3:b9:c5:6f:62:b0:99:a8:1c:5c:54:ad:25:bb:
af:8a:c3:b1:59:dd:ad:82:e6:ab:bd:97:82:4a:56:
29:01:ab:fa:ed:c6:59:81:75:77:4a:65:36:6a:c5:
fa:13:07:80:b6:39:54:5e:73:6a:6a:e5:27:5a:81:
66:5a:e0:57:e6:1e:2b:69:29:30:49:6b:e2:90:62:
86:ee:5c:aa:d6:cb:cc:4f:11:f8:72:e5:70:ec:75:
98:8d:86:f0:c2:d7:1f:74:44:8d:1a:00:81:1e:54:
f8:e7:9b:a5:04:c2:b7:10:f2:65:cb:4a:23:97:b5:
d5:8e:0f:c7:28:6b:47:63:50:d1:32:16:ea:43:68:
a9:c3:aa:96:2f:8b:f5:a3:0f:fb:98:aa:1f:4e:7e:
80:64:38:69:f1:c9:ec:4a:88:5b:83:43:81:38:53:
3c:6c:b7:ad:c4:b2:eb:03:08:2d:fe:82:5a:22:4c:
7a:5b:01:0d:ab:3c:f8:5c:15:bc:77:b6:1b:46:8e:
77:10:8b:b6:8a:d5:f0:73:93:87:ea:2b:82:ce:66:
54:a5:8b:e3:af:0b:ea:ca:f0:b4:4f:fc:fb:e1:82:
b2:fb:af:e0:c1:7c:ba:f8:56:3f:a9:f5:cb:bb:8a:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:66:A8:87:7B:F9:73:EB:53:7A:BB:2A:0C:28:0A:97:DE:D7:AC:FF
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a9:f6:60:43:df:87:11:c6:da:83:17:a4:f7:08:81:de:3f:
f4:f3:9c:3e:24:84:2f:1d:ab:e0:97:93:f5:3f:8c:4b:b3:d5:
8f:a7:43:1e:17:85:74:b6:4d:c0:14:8d:65:4e:ee:5c:12:74:
b0:7b:ba:33:92:c6:87:03:a7:67:66:87:93:06:03:bd:2b:3d:
a4:74:bc:17:18:0a:67:bc:48:2c:54:34:41:ac:b0:50:db:ae:
af:8c:69:f3:44:f8:cb:8f:56:76:1e:64:97:f1:f6:53:bd:44:
24:a0:f7:1b:3e:80:4f:b4:44:89:e5:cf:19:a9:ab:8c:75:a0:
56:98:e8:0d:2b:83:07:db:89:64:27:24:98:c4:e7:a7:d2:25:
c5:7a:0d:5f:d4:6f:6b:e7:03:c5:db:8b:7a:2d:83:6e:18:df:
92:70:d5:0f:d9:7c:af:11:fd:6c:bd:73:fa:e6:2a:4b:05:a7:
bc:f1:11:4a:07:c8:eb:a8:41:95:bf:94:35:bf:20:cb:e3:6c:
74:14:3e:39:02:0c:14:e6:89:ac:5d:3f:60:2f:53:ac:28:fa:
1b:4b:c5:5b:99:ca:8e:b1:77:dd:0d:9e:7c:73:5c:6f:9d:a9:
c0:f0:90:e3:fc:3c:6e:79:bf:1d:6b:3c:9a:a7:42:82:f8:b9:
70:ba:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:40 2025 by rpki-client