Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: QbMsieIukoL5/TfbXHtbBgQSjelQ0a2yzTOxsVKj530=
Subject key identifier: 04:EF:00:80:11:71:3E:CE:B9:10:3E:75:24:3D:50:6B:72:D5:E3:49
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 0197C07F680AE1F09DE68969D112269B8340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 1301
Signing time: Mon 30 Jun 2025 11:01:04 +0000
Manifest this update: Mon 30 Jun 2025 11:01:04 +0000
Manifest next update: Tue 01 Jul 2025 11:01:04 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: zfMgtnancs7GPRVH2rTwz8zsfW8+khe6+8wTn2V5AvU=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:68:0a:e1:f0:9d:e6:89:69:d1:12:26:9b:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Jun 30 11:01:04 2025 GMT
Not After : Jul 1 11:01:04 2025 GMT
Subject: CN=04ef008011713eceb9103e75243d506b72d5e349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:04:f9:f8:8b:48:48:a0:a2:49:6a:b8:b6:
f1:4f:c9:ad:e2:e3:51:6e:d9:44:ac:44:8d:3a:b4:
70:23:01:64:83:d7:9a:b6:97:79:a4:98:83:d8:84:
83:3d:40:90:a0:9f:06:77:1f:0d:11:11:12:53:7f:
8a:19:cd:e7:20:b0:14:c9:ac:53:ed:aa:25:1b:26:
22:2f:2a:82:8a:59:c3:77:dd:8c:dc:d3:69:2d:60:
41:1e:69:62:b7:2d:11:20:e1:19:55:12:b7:77:1d:
94:20:99:1a:64:8f:41:63:97:72:c3:1e:16:f5:c6:
2b:df:74:3d:93:bf:84:5e:5f:e3:71:91:65:16:3b:
0b:ad:3e:d4:44:28:e0:ff:c6:0a:bf:54:4e:ad:fe:
ea:ed:4c:42:e7:d8:77:af:7e:bc:54:95:f9:6d:0d:
03:9a:37:a9:23:69:67:93:cc:18:43:ec:5e:4e:25:
cf:cb:e1:17:b7:f0:37:00:cc:34:f1:7d:47:ff:ab:
79:0a:d2:fc:2a:ee:a5:cc:95:8f:8f:b3:ed:2a:b6:
27:c5:4e:7c:d3:6c:b8:ba:53:ec:98:54:4a:73:2c:
56:1a:8a:9b:95:9c:2d:40:a5:64:2e:21:2c:cb:e3:
a5:25:2a:25:b0:39:e0:3c:13:dd:05:34:78:e4:e2:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:00:80:11:71:3E:CE:B9:10:3E:75:24:3D:50:6B:72:D5:E3:49
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:65:66:f6:8c:6c:60:18:f0:60:1d:89:95:f0:0f:fd:73:
d0:d6:18:33:bb:43:7d:f3:35:7a:18:aa:b1:bd:fc:0e:65:8c:
c4:02:76:25:5b:e8:8a:1f:b5:a8:e2:96:71:c9:e7:9e:d1:9c:
7c:83:66:c1:93:a7:7f:85:bf:8e:98:6a:fa:53:19:2f:52:20:
b6:be:6f:de:21:31:61:85:71:f3:3b:73:d5:09:12:e5:0e:98:
67:2c:76:ef:e3:21:56:77:97:64:b5:3e:b4:ab:f7:5c:79:e5:
5a:38:a7:fa:5c:1a:cb:ae:bd:c5:fe:9d:42:d4:80:f9:a7:74:
47:e2:34:e8:22:04:17:54:4d:06:93:a9:78:e2:f6:d0:54:2b:
70:22:3a:e3:07:2a:7e:3d:98:7f:23:a2:94:94:69:26:8f:ac:
aa:89:07:ca:b1:95:20:70:cf:67:b5:11:21:23:ab:73:48:38:
e5:a3:69:94:03:c1:a2:77:2a:db:c2:2f:ab:b4:c1:63:02:2b:
eb:54:ce:4d:c1:4f:04:4a:27:27:f0:41:70:0f:07:b3:f3:89:
42:5c:ea:d9:fc:c3:13:45:d2:9e:4a:b5:5b:8f:15:77:1a:c2:
62:c3:47:f1:85:cb:f3:77:ce:0e:80:da:cf:b9:c1:3e:27:e5:
75:77:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:39:49 2025 by rpki-client