Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: +WYQLVkZIIQbXUhOTD3eQpkf9V9gDj/QGxbddlgPcsk=
Subject key identifier: 39:79:31:89:E2:3B:C8:75:83:F7:4B:37:B9:39:1D:84:3E:59:A4:99
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 0197B7B366C02F88870ECCE83D2890B95E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
2: ft2mxf9aaNoul-AnIThMbBr-lps.roa (hash: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: 4ROGn78H9n9V/GpnQFsDLjGwBOvQnxz3wYpW1GB2lwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:66:c0:2f:88:87:0e:cc:e8:3d:28:90:b9:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=39793189e23bc87583f74b37b9391d843e59a499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:72:82:9f:c9:61:01:c3:69:5f:e7:c4:c9:
a0:8b:a4:c7:6a:8a:a5:02:df:a8:d9:3a:fc:6d:8d:
0c:e0:ab:9e:6d:07:9a:be:c4:8d:d6:1e:4d:c1:90:
bb:59:23:90:10:b6:e3:b1:4d:4e:c5:14:f8:1c:5d:
49:17:a6:9b:7e:70:65:67:60:b9:73:bd:a8:c0:82:
e6:20:f8:c7:55:49:ef:fc:ff:cf:18:83:45:fe:2c:
b5:e4:96:69:c9:06:60:be:34:e6:ee:f3:c6:44:cc:
38:4a:d0:7e:a7:85:31:90:14:c5:6a:4d:49:4f:07:
37:dd:e7:22:d3:28:b9:f6:a4:17:1c:4f:50:f4:40:
c3:22:96:7e:91:57:81:ac:d2:c9:5a:63:b9:6b:76:
b2:17:a2:7a:c7:a5:fb:7f:44:cd:e4:ca:42:52:e7:
55:f4:82:54:c6:49:4c:a6:fc:cb:0d:52:f8:93:cf:
86:49:c9:7f:5e:9a:4d:9a:a7:12:5e:76:c4:6c:fb:
30:ca:02:6d:5c:b7:f7:89:d2:a0:f1:7f:63:83:7e:
f2:8c:62:50:37:c6:b9:0c:a0:f1:27:7c:37:7e:af:
6d:44:28:ae:b6:1b:de:a0:10:14:8a:8c:41:33:98:
a3:53:03:c0:e3:8b:3b:fc:e3:7d:f0:5e:66:ad:39:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:31:89:E2:3B:C8:75:83:F7:4B:37:B9:39:1D:84:3E:59:A4:99
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:59:10:aa:ca:71:ec:d5:1c:62:fa:3c:73:74:01:61:d6:76:
3a:c1:5a:57:af:50:31:8d:2b:91:27:36:21:ce:cf:df:ec:75:
cb:d5:d3:36:24:8c:a9:30:ae:9f:ad:fd:c0:43:79:55:1e:c0:
b6:18:a7:87:e7:d3:75:34:41:b4:a9:2c:1f:b8:83:05:de:60:
0c:d8:01:67:36:74:6b:37:f5:ef:56:af:89:ac:f1:10:10:c3:
4b:80:19:71:22:8b:ec:90:05:e1:27:cf:83:69:c8:e6:3e:e2:
8e:c1:11:d7:35:e0:91:b4:aa:a5:db:9c:1e:8f:c9:4d:71:b4:
49:02:8b:14:d5:81:c2:64:40:36:a7:91:95:84:ba:40:be:ee:
49:31:81:cf:94:ed:b1:ed:82:98:f1:ae:c3:aa:61:cc:94:4b:
c1:6c:68:b4:27:f9:6a:10:20:ca:2d:a1:d0:95:20:f6:16:34:
79:5a:e7:e8:e5:8f:18:69:22:63:55:54:05:a3:19:09:4d:6f:
a9:b5:1e:54:63:72:d7:2b:8a:6f:d7:28:62:8d:22:c5:c1:16:
a7:bd:d0:bf:88:27:4b:5a:b7:fa:ce:92:4c:6e:66:27:ad:ed:
0d:37:66:99:2f:3e:59:c8:f3:70:32:0d:6c:4b:0b:d5:27:bf:
6b:8e:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:39 2025 by rpki-client