Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: jaP8BVIP86kRt/HEGUAViX3aCL07GyM0dLEN+3AFHRc=
Subject key identifier: B0:2F:B3:16:0D:F0:30:8E:14:96:69:A8:71:3D:88:60:7F:DE:3A:E3
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0197C61398951B2A49D4DD04A0C76823D509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 13:01:02 +0000
Manifest this update: Tue 01 Jul 2025 13:01:02 +0000
Manifest next update: Wed 02 Jul 2025 13:01:02 +0000
Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: nv8nfyz5MFxWBMyOs5BOv7b06eRwcXT3iE9Gu4HV1Vg=)
5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:98:95:1b:2a:49:d4:dd:04:a0:c7:68:23:d5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jul 1 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=b02fb3160df0308e149669a8713d88607fde3ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:a4:33:92:27:51:e8:a7:01:66:3b:d3:29:
90:dc:7f:8c:c1:3e:ad:3d:d1:ee:76:88:5c:8a:1a:
b0:16:29:bd:1f:da:ce:9b:5b:64:3b:84:47:f2:c6:
69:5e:6a:c5:9b:af:a6:16:31:b4:a7:fe:c6:79:d3:
b0:77:08:55:0a:a1:ba:69:91:89:18:e5:c9:77:52:
64:2b:a6:fa:4a:55:9e:78:b7:5e:57:aa:8b:6c:ba:
c5:4b:0c:08:25:f0:18:38:13:0c:4d:75:30:97:aa:
4f:73:8d:7c:1b:9f:86:ac:0b:67:d3:bd:be:a8:49:
28:65:50:28:e7:f6:95:89:5d:b3:c9:44:54:48:54:
51:32:10:79:73:52:6f:fa:9f:b7:7f:04:db:c1:c3:
70:3e:d9:1c:e8:80:a1:c6:2f:e7:aa:73:45:47:40:
ec:2b:b5:89:f8:35:ef:5c:c2:cc:d3:42:a3:2e:6a:
aa:00:ff:14:55:12:db:c1:34:75:32:ae:e2:bf:a5:
94:66:5b:28:65:08:d1:a4:85:0a:e7:56:b7:e4:ea:
2e:99:9e:99:49:a9:11:2f:27:09:99:45:24:ca:ca:
a5:23:e8:01:8f:51:af:5d:50:62:9f:34:0c:93:3c:
db:49:be:36:47:90:8c:62:8b:09:75:f9:68:14:19:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:B3:16:0D:F0:30:8E:14:96:69:A8:71:3D:88:60:7F:DE:3A:E3
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:52:4f:b0:19:99:ba:f0:21:63:07:b6:51:15:dc:73:5d:
fa:66:73:a8:e4:59:f9:9c:fb:1f:e5:6a:bb:19:8f:c6:12:21:
ca:50:56:c3:95:e4:e0:3a:cb:aa:9c:9f:f5:0d:0c:38:59:dd:
54:1c:99:16:3f:62:3b:cc:7f:17:e9:3e:ad:b1:f3:83:c2:32:
ac:64:65:6d:fc:60:0b:fd:a9:ed:a4:47:db:84:fe:1f:23:1e:
89:ca:0c:08:b9:ed:0a:33:b4:2f:92:91:8c:fa:8a:20:96:d5:
a8:9e:34:6b:06:d0:fa:1a:c7:5a:83:37:56:af:2a:42:4a:5e:
7c:16:87:f9:02:17:d0:a2:af:73:9f:ef:91:73:14:5f:60:8e:
a2:94:1c:3c:91:5b:f0:90:01:78:02:59:43:cf:74:05:bf:c9:
63:08:b2:f0:99:49:99:9f:e5:16:f2:77:5c:cd:a2:db:80:0f:
65:70:14:43:e6:e5:e3:7d:e3:cc:a7:68:19:cc:f0:7f:97:a1:
dc:9d:9c:b6:76:09:68:4f:dd:67:fe:7c:77:22:7a:74:92:e2:
65:58:1e:63:ab:f1:cb:ac:1b:bb:1c:91:47:da:25:29:6e:19:
90:23:96:6d:a4:9c:4c:11:e7:dd:be:64:46:55:3c:08:9a:4e:
20:cc:2d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:24:28 2025 by rpki-client