Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: Lclv3a1sOMy0FugGAO/HAz94T9YEMY9OPydE/TMECh0=
Subject key identifier: 1B:B4:E3:40:84:D2:1D:B5:63:86:BF:77:19:8D:CC:25:6A:B3:A0:2E
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 0197B88F16EBD0D8DBBF154557DF0F604762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 0E71
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: 3TDfPJW95/0JstMdx9PwCY8g3Zu6UoQDDEppw1DIt7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:16:eb:d0:d8:db:bf:15:45:57:df:0f:60:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=1bb4e34084d21db56386bf77198dcc256ab3a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:dd:21:0e:84:96:39:25:09:80:1b:83:2f:
cf:57:da:af:3b:15:ff:00:7b:8d:c9:64:31:df:b3:
1b:1e:7e:fe:94:3e:65:87:de:fb:3b:c2:2a:61:da:
a3:a4:86:aa:c4:fe:9d:7b:f0:0b:68:c3:97:04:03:
71:53:e0:8d:9d:2e:65:41:03:56:cd:44:8c:a4:0c:
b6:73:75:28:65:d6:ae:f6:4f:18:77:cc:fb:ce:b5:
95:0d:b3:0c:36:fe:20:6d:ac:d6:f6:1e:4d:0f:de:
52:80:00:f8:0d:50:03:15:d9:3d:55:2a:bc:f1:90:
96:97:7b:86:ed:9c:e5:51:0c:b1:8e:ec:1d:e6:ee:
d6:15:14:21:d9:c7:71:a8:00:71:38:e3:e2:09:a6:
0d:9b:97:31:d3:56:25:e5:e4:e7:bd:f2:d5:41:c6:
f7:98:68:d4:47:52:8d:c3:70:88:68:ff:d8:26:36:
b4:cb:fd:34:92:26:6b:83:c7:b7:24:97:f8:96:0c:
dd:d6:73:fb:d5:42:7e:28:35:1a:c5:55:28:b4:6e:
70:9c:02:eb:9f:78:d5:5f:9a:2d:b4:81:52:c5:fc:
8b:da:cf:02:0b:72:ec:48:eb:3b:2d:af:83:f0:43:
71:09:4a:a3:1c:fb:fc:bc:fc:07:0f:e1:3d:95:07:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:E3:40:84:D2:1D:B5:63:86:BF:77:19:8D:CC:25:6A:B3:A0:2E
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:77:87:35:65:06:b9:3c:e9:2e:9e:4a:64:8c:8e:ec:54:
de:a0:4e:51:9b:79:31:4e:fd:39:0a:66:2c:b0:14:b0:17:5f:
89:0e:0c:9f:79:f3:28:cb:42:69:eb:76:55:6f:1a:f6:0a:a4:
e7:9e:4a:7c:01:d9:20:fd:97:61:78:d7:df:1a:22:a5:2e:09:
62:37:bb:79:7f:95:cc:97:33:2a:19:a5:f9:af:d3:71:01:c4:
c3:22:bd:9b:ab:03:61:55:0e:6b:78:9e:6d:64:a7:4c:9c:89:
7c:fc:27:71:cd:53:de:63:22:3c:96:60:7b:32:b1:29:74:66:
85:89:cc:30:31:53:58:93:8a:78:dc:da:dd:48:bd:05:76:db:
9a:ce:4d:fe:b5:c0:d3:2f:8c:b9:c6:3a:7d:f8:b0:a7:00:29:
7f:41:aa:bb:25:cf:de:29:a0:c3:67:b2:ef:73:cf:61:85:28:
56:7a:20:76:26:31:d5:8b:cd:72:42:5d:23:a9:56:b7:19:1f:
b2:c9:9d:69:56:a6:11:f3:6b:c4:2b:b2:30:88:58:86:ff:73:
9b:2f:9e:48:52:cc:53:6e:93:b1:61:9b:a3:a8:b6:55:fb:f4:
cb:56:ab:d8:70:ce:b9:ff:4d:6a:d0:55:8a:9c:d1:08:5f:0a:
df:03:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:53:47 2025 by rpki-client