Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: G13jwEDl/Bv+1SI9yfIXkwfR8mKWReSl9F4QVBmYdjo=
Subject key identifier: 7B:C0:B4:86:12:2B:C9:27:C9:3F:44:DB:49:9E:61:2E:D7:EE:46:D4
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0197B632B77D29C92F1C83CC41ADE2627CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0DBC
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: ZvW8xt3GXJFv2VCVRl/VeJ+qt1+FANkxo8NXaz0AdOQ=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b7:7d:29:c9:2f:1c:83:cc:41:ad:e2:62:7c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=7bc0b486122bc927c93f44db499e612ed7ee46d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:37:22:0c:90:ac:a8:c0:e9:63:28:b2:e7:
59:88:94:08:1b:40:61:e4:08:46:16:2c:b6:bf:49:
01:b0:93:56:66:5f:27:3d:6d:f3:a2:74:28:fd:76:
00:02:48:46:99:bd:0c:be:25:ae:d2:1b:9c:d2:a7:
c8:c2:6c:ab:e4:e9:9b:1f:ff:f9:0e:df:f6:06:21:
e8:57:e2:81:3c:36:89:d5:79:03:b2:6c:11:31:aa:
96:41:78:53:ea:a8:77:cd:9d:e4:2d:90:8e:f5:1f:
15:7b:d8:3d:c3:32:2f:a7:37:96:54:55:32:08:e4:
89:d5:b4:7a:de:08:80:c4:3a:47:58:90:ab:8b:f0:
8e:0a:45:60:b6:57:5b:7f:e9:c9:c0:b7:2e:ac:e5:
39:b7:85:1e:34:73:87:87:be:64:36:ca:e3:13:3f:
20:45:69:cf:e7:35:9f:42:37:9c:07:2f:df:c6:fd:
c0:27:f9:3b:76:79:2f:cf:d4:e5:28:d0:ab:6f:84:
83:21:e1:e8:38:a7:a8:51:32:76:c4:6b:ae:08:49:
18:8a:22:82:3c:87:7e:9e:cb:64:6d:cd:be:f5:64:
1b:d2:97:d3:1c:19:f9:19:bc:dc:80:b9:f4:82:eb:
b0:bf:b1:3c:61:f6:21:22:26:8f:72:86:69:1b:28:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:B4:86:12:2B:C9:27:C9:3F:44:DB:49:9E:61:2E:D7:EE:46:D4
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:38:52:cb:98:3a:44:29:aa:e5:29:97:92:c3:72:1b:c5:
38:a4:3e:a9:d7:49:f6:d8:cd:59:e6:70:ab:59:ed:e5:e3:46:
f0:ab:d1:2a:bd:03:4a:70:9c:4e:4a:ea:cb:ab:c7:68:c2:8c:
f0:bc:84:d5:b2:5b:80:46:c6:40:bb:01:12:28:74:b3:5a:46:
4e:95:6e:0b:af:90:35:c9:5a:1d:8c:67:7a:11:20:d0:c1:53:
c6:b7:7f:53:69:b9:0a:61:58:e3:ca:d8:08:1c:4e:8c:19:77:
c3:39:01:32:d2:db:5e:c0:b2:85:8f:31:85:9f:cb:9e:10:73:
03:bb:03:ea:9e:e8:f3:73:16:38:35:dc:c4:7d:94:2d:79:ee:
e8:30:40:a0:63:a0:b4:10:dc:85:bc:c4:ab:89:fb:84:aa:eb:
73:b2:95:19:a9:16:24:c8:be:81:8f:9a:e6:3a:29:c7:d1:21:
91:18:25:86:24:d4:d2:6c:26:b5:72:6a:40:cf:dc:06:69:87:
99:fb:62:7d:65:f0:7d:f5:96:19:8d:a3:59:47:ed:b0:9a:27:
4a:89:1d:60:5e:cc:16:86:8b:c0:e5:b4:40:c0:47:99:c1:f1:
1a:fd:b3:6f:98:4e:10:9e:d9:4a:69:e0:7a:2b:f6:37:7d:62:
5e:64:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:13 2025 by rpki-client