Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: itsNq18wCSONAgaIH6Eh4mPhODOz2IHlJLS0BD3CCqU=
Subject key identifier: 7E:34:5D:14:A6:F3:C9:12:DA:C6:A6:4A:CB:3A:F8:9E:FF:B9:57:F8
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0197B70F1CC9250B6BEC8173579474393C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 03A4
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: L-gkzT_i4oHU7qxpuc0zJS-8-z8.roa (hash: HSMXzxBmRLzF1beqds20c9gNGv4tHZqGNf3E+15YX0k=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: G2b11Y4s9C3/eYKmHoHXmrfH6BU3Pnuz/zRWeak6uh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1c:c9:25:0b:6b:ec:81:73:57:94:74:39:3c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=7e345d14a6f3c912dac6a64acb3af89effb957f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:b0:38:a2:e8:38:2d:88:ff:b0:d0:f0:ad:
a9:c8:f2:60:77:64:d2:cf:84:4f:61:e8:55:cc:14:
4d:9b:84:7c:c4:61:05:d3:c9:52:52:0b:2a:04:f3:
ed:4d:43:ae:64:a7:b1:d3:fe:1f:c2:ff:9b:d9:d9:
84:2f:ff:4f:a0:8b:32:ac:c6:bd:82:5f:e5:7b:e4:
23:3c:19:24:9b:0d:4f:af:7c:86:fa:51:9c:74:a1:
0a:de:fb:23:28:78:08:a8:39:e7:0e:28:94:5d:2e:
23:ae:09:57:f6:51:1c:b5:80:ef:fa:0a:22:06:a0:
0c:32:2e:13:2a:1d:a2:5b:2e:59:8d:ea:f4:f9:8e:
f7:0b:73:f9:a2:8e:db:b3:16:da:46:f6:9d:4c:e4:
b1:b9:0d:3b:46:62:39:1c:30:04:10:87:fb:af:b0:
94:6d:27:a8:0b:e3:7b:44:a1:c7:7d:aa:39:10:13:
4f:04:10:cd:c2:f8:57:1d:e8:7a:97:89:17:2f:57:
5a:12:39:52:28:b6:44:49:ea:2b:9b:f7:93:91:1e:
d8:ea:29:48:89:95:fe:d8:73:e4:d8:87:3f:25:d4:
31:ad:9e:c2:af:b3:5f:fe:cf:c9:76:a6:7f:b6:78:
46:90:65:90:82:30:25:ac:b3:94:af:ed:48:d6:b0:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:5D:14:A6:F3:C9:12:DA:C6:A6:4A:CB:3A:F8:9E:FF:B9:57:F8
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:c5:65:5d:c5:2c:6c:58:03:0d:1f:15:49:1c:e7:4f:5b:
85:69:9d:92:5a:72:f9:fe:4f:f4:aa:3d:73:08:af:74:16:53:
93:6c:0b:e1:30:a3:06:f7:08:3e:bb:f6:da:8a:2c:1f:e3:fd:
63:8c:0b:20:cc:f6:2d:23:eb:b0:17:0c:28:a9:2a:4b:67:dd:
de:d5:5b:44:8d:cb:e1:3d:85:b7:5c:60:2b:47:5d:ac:79:4c:
44:5b:e9:b5:a8:e0:5a:66:f3:88:6c:19:04:fc:e4:f8:3c:57:
2c:f3:ce:6f:39:9c:e5:4e:88:8b:35:62:a0:9b:ab:f4:55:06:
63:65:ff:72:84:55:9a:3b:6c:97:36:da:e8:10:ae:8d:f1:b4:
8f:e1:d4:be:8a:a0:e7:6b:fc:6c:f6:f7:68:43:63:5f:64:af:
4c:9a:19:b6:15:fa:a3:01:22:5c:af:3d:ac:5b:fa:af:44:e8:
0e:e7:0c:41:13:2e:0b:41:15:b4:f1:56:00:1a:71:12:fc:26:
1a:19:e2:de:f2:f9:98:9b:86:a9:f5:23:0e:0b:46:64:44:19:
d6:38:ff:d5:78:f4:f2:46:13:e7:a7:84:1a:e3:49:6d:f1:bb:
d5:a5:c1:e5:12:64:11:97:4c:16:9a:81:b6:e3:27:06:4a:3f:
ec:96:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:36 2025 by rpki-client