Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: tGU2D1MLwYR+KiKS7naL2lDfb6g6k21W6RhgQa/LHHw=
Subject key identifier: F3:93:1E:FF:17:66:21:5F:0C:75:E7:82:1C:18:BF:A9:05:24:8C:8D
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0197B70E9C6CF830C23EF612EF40DBBA3007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0D44
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: v9+LNEKnA/f6v3AqSssRd7NvBX6pFNN5MgbSzxXH8/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9c:6c:f8:30:c2:3e:f6:12:ef:40:db:ba:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=f3931eff1766215f0c75e7821c18bfa905248c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:c4:97:da:15:12:4b:36:d6:a7:f9:3d:cc:
fa:20:fc:8e:0a:2e:ea:c4:b6:ad:41:05:02:26:0a:
dd:ed:1f:c1:ee:9f:02:f0:ce:73:90:82:67:09:c3:
9b:64:55:73:d8:22:22:3d:96:03:d2:b8:4b:bb:f5:
21:18:67:4a:25:ef:7a:a4:35:6d:14:5f:55:90:db:
a6:3a:fc:a5:08:c7:af:8d:25:46:53:14:18:3e:94:
27:6e:93:d6:5c:0d:30:57:de:f0:d0:dd:4d:22:e0:
a0:25:0b:9a:f1:ff:fc:ef:4e:67:8c:f5:da:95:e6:
8c:05:57:7e:0e:5c:b2:d9:a1:5c:10:13:75:47:99:
0b:d3:55:9f:04:4a:0d:c6:1c:34:4d:16:34:49:7e:
f5:c2:3b:3a:c6:f9:ed:15:76:c2:ff:e3:b6:24:84:
1b:39:29:c4:42:1e:9b:c2:94:07:ab:61:a1:3a:65:
7e:e5:2b:d4:45:86:13:dd:12:4a:81:09:ef:10:60:
52:38:d3:b6:fa:da:f4:cf:88:b4:41:4d:f1:8b:a4:
a2:13:a5:d9:07:b9:e4:21:72:92:32:94:3f:fd:ac:
2e:23:da:7d:73:08:43:bf:1e:39:96:d1:5f:29:e7:
12:55:a7:c4:67:d1:00:fc:5c:b2:9f:ab:bd:f4:f0:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:1E:FF:17:66:21:5F:0C:75:E7:82:1C:18:BF:A9:05:24:8C:8D
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:aa:a4:32:3a:6d:b7:42:f5:a5:05:8f:2d:7d:fe:99:e1:
80:58:ba:e1:c3:73:3f:0b:21:3c:1d:93:3b:12:fd:ad:cb:0f:
2f:82:8a:be:09:40:ee:95:cf:7e:37:5a:4e:02:69:cc:6b:ca:
7a:87:8e:c2:6c:eb:6f:30:8c:3e:37:a3:ae:9e:bc:77:e2:07:
d1:a2:18:46:e8:93:f8:0c:9a:62:bf:fa:36:d8:fd:58:e6:c3:
43:0d:6e:95:52:0f:df:db:69:d2:4c:61:05:c7:18:ac:f1:32:
26:20:bb:18:30:e7:c9:71:9e:1f:95:bc:34:a3:8f:95:e0:ed:
58:49:06:7c:99:e6:ea:18:9c:0e:b6:87:85:9a:cd:0b:93:fe:
1f:76:47:6b:43:56:64:e4:2a:93:9b:99:c5:d7:df:50:83:9e:
4c:11:96:b4:ec:96:40:b7:80:fc:18:82:15:2b:f2:e4:46:c0:
5a:7b:a4:87:de:56:7c:25:37:dd:97:d5:48:30:56:e3:3d:0c:
1c:e6:2f:42:d8:20:bf:22:73:97:1e:e1:52:bd:c2:81:0c:f0:
b2:c3:e7:01:0b:07:a7:6c:a5:2e:40:be:34:26:e0:e9:c6:42:
3a:0c:af:c3:4f:28:52:a9:10:42:33:6f:d9:90:bc:78:23:06:
af:ec:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:40 2025 by rpki-client