Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: GIKKD3chi92+NnztaJ3mBaUU8Xjmts5NOSjl6bEFbQc=
Subject key identifier: 9E:C7:6F:87:49:F9:AC:B0:BC:1C:CA:3F:FA:B2:78:71:FF:53:0C:33
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0197C72670520B02EF66EFECA66D956024A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0D02
Signing time: Tue 01 Jul 2025 18:01:14 +0000
Manifest this update: Tue 01 Jul 2025 18:01:14 +0000
Manifest next update: Wed 02 Jul 2025 18:01:14 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: VpaOFo51F4v/WrK6zLkQ4P8BpgIjBj1povYTuAqDwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:70:52:0b:02:ef:66:ef:ec:a6:6d:95:60:24:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jul 1 18:01:14 2025 GMT
Not After : Jul 2 18:01:14 2025 GMT
Subject: CN=9ec76f8749f9acb0bc1cca3ffab27871ff530c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:66:96:9c:75:0d:b6:3b:ca:fc:7a:8f:df:
05:ab:5c:2c:1c:86:63:9c:96:49:8a:15:a4:e0:a4:
34:81:9c:7e:7b:9d:db:0c:cb:83:01:84:e2:3f:48:
88:66:4a:c5:20:16:d1:4f:94:78:2d:af:95:b2:8f:
ac:21:80:6a:b4:de:19:ad:f7:47:78:b3:13:88:09:
06:34:36:1c:8e:32:e0:42:c2:0d:a2:0b:e5:f3:c5:
3c:0d:bb:51:7f:7f:84:bf:4b:e4:e8:2b:b7:ca:25:
c5:2b:9a:a7:c7:b4:bd:fd:d4:83:6b:c5:3e:56:bc:
24:f0:03:8e:79:03:7c:62:16:52:f6:df:18:1a:f2:
f2:22:07:7f:ea:c9:f4:6e:1f:bd:38:de:3a:ab:92:
78:33:4c:d7:1f:86:48:e0:7a:c0:ff:15:41:1c:00:
d7:57:54:76:78:ed:af:fe:18:b7:2f:ad:99:7c:c3:
29:3c:9c:4c:73:91:1c:58:82:77:98:96:1b:48:ef:
a9:f7:05:97:9b:86:e2:79:58:85:62:be:d4:4e:8c:
88:11:2d:de:69:ef:01:6a:34:5e:a1:96:57:20:fc:
2d:e4:68:17:3d:78:07:e7:b8:07:e1:d5:8a:3a:2c:
97:e0:47:67:da:88:fa:fd:08:ea:7d:46:9d:6c:f8:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:6F:87:49:F9:AC:B0:BC:1C:CA:3F:FA:B2:78:71:FF:53:0C:33
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2b:cb:aa:7b:1e:8d:5f:3d:54:19:5d:07:fd:6e:c7:89:4f:
77:7a:91:c9:f3:a1:19:79:48:65:a4:34:26:74:e6:82:a4:fb:
d1:1d:9f:8b:98:9c:2e:dd:c0:cc:a6:8c:b8:40:f8:7b:f9:10:
84:0c:57:70:32:c4:fb:8a:3d:c9:1f:67:54:1f:7b:1c:ca:23:
4e:78:b9:dd:f5:45:85:44:38:5f:f5:fd:15:59:6b:dd:ac:c6:
ab:f8:79:34:aa:64:54:8d:e1:4a:67:6f:b0:52:ef:c2:28:5e:
f1:bf:e9:35:cc:73:21:f7:68:95:1d:80:6e:6d:06:2a:ce:d3:
58:a7:6b:79:da:f3:9d:74:9f:87:ce:01:ce:5d:e3:16:f0:0c:
2c:a9:bf:08:6b:a5:e8:e5:7d:69:60:54:4a:06:16:05:79:d5:
0e:cd:90:42:f3:2d:f8:e2:b5:0b:fc:3b:f0:85:3a:05:60:11:
ab:60:b4:a2:a3:40:00:72:c4:a9:85:30:a4:4e:66:fd:d7:3f:
49:00:98:06:4d:93:c2:c2:fd:e5:88:55:08:73:5d:c6:2d:b9:
aa:9f:83:39:3b:19:9e:8b:23:37:4f:63:5b:42:ce:4f:3d:29:
4a:fc:40:93:2e:a5:86:f0:8c:9d:44:88:78:51:af:96:0e:0c:
00:42:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:45:59 2025 by rpki-client