Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: AUw5xb/vqS+tU3f8TQfnfuBb6rIPyRiK1gfTHmDPD5w=
Subject key identifier: 38:54:05:0C:72:54:E0:36:40:79:BD:A1:83:49:14:7C:F3:13:31:83
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0197C1C8DE02550D4F65F807F4C6288588DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0C0A
Signing time: Mon 30 Jun 2025 17:00:56 +0000
Manifest this update: Mon 30 Jun 2025 17:00:56 +0000
Manifest next update: Tue 01 Jul 2025 17:00:56 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: RmdNKlO7PapH3U7Dq5cNbp57U/VTpJQCkNDE3Kife1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:de:02:55:0d:4f:65:f8:07:f4:c6:28:85:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 30 17:00:56 2025 GMT
Not After : Jul 1 17:00:56 2025 GMT
Subject: CN=3854050c7254e0364079bda18349147cf3133183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:84:61:37:78:82:c0:f1:2a:27:a4:00:ce:
3c:17:39:9a:b0:b4:14:11:da:8e:05:00:67:9b:8e:
ae:0d:58:f9:93:62:f2:f3:8a:44:39:d1:ab:76:45:
ee:03:34:c6:ea:b9:24:44:ca:15:40:fb:c1:3c:52:
3b:10:5d:0c:65:a8:36:51:fa:69:3d:d5:0d:3d:5e:
74:df:dc:20:6b:16:89:74:37:52:18:d1:91:20:7f:
d0:2a:77:b7:63:79:c9:d2:f9:b6:4c:9b:7b:7c:45:
ad:71:a3:dc:58:2e:55:2d:59:b0:b6:04:f4:c9:1b:
c9:20:ad:a8:84:89:a0:db:ea:5f:50:e9:51:50:af:
a5:a8:1b:4b:64:b7:20:70:f0:f3:7f:fa:4e:7c:b3:
f2:ff:14:bb:de:c1:d4:92:8a:79:90:54:5f:4c:01:
50:bc:d1:62:cf:a4:3e:9b:fb:1b:1a:ec:4b:dd:de:
7c:98:7e:35:ba:1f:8e:26:69:a5:0b:de:45:ac:ea:
4d:0b:c8:c3:a4:58:c8:8c:20:6f:26:bd:26:24:64:
52:6f:10:34:22:bb:16:50:b5:1b:54:f3:15:00:b7:
d1:3d:de:31:4d:16:54:71:7e:c0:67:c8:35:1a:fb:
e8:df:5b:aa:f5:8f:15:2e:15:b9:ea:0b:cf:eb:51:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:05:0C:72:54:E0:36:40:79:BD:A1:83:49:14:7C:F3:13:31:83
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:45:4a:bc:97:80:e8:8d:ed:cc:65:f5:1b:37:da:ce:8a:
ca:17:8c:e2:dc:55:5b:90:e8:4a:67:39:71:03:ab:62:f1:f2:
cb:40:bf:04:44:8f:f2:49:3c:d3:21:30:e9:8b:46:9f:45:b8:
51:b0:fc:d7:53:79:ae:54:b8:36:f9:e8:7e:13:6f:ae:68:51:
2b:b5:10:70:f8:f5:5e:e7:c8:10:75:c7:cb:0c:95:3e:6b:54:
65:57:21:78:1e:da:43:e3:9d:51:71:4d:39:4d:3c:1c:2e:6a:
84:f1:98:71:5a:6d:ea:42:51:52:ba:92:3f:d2:57:fb:1d:3c:
cf:ef:71:57:b2:46:6f:5f:8e:68:ea:fc:67:2b:03:bd:b1:7e:
71:b5:fb:04:ca:65:38:ea:76:55:26:eb:74:52:84:10:9d:0f:
3e:8f:af:eb:06:36:cf:01:77:37:bb:23:83:db:b8:0d:dc:c8:
56:6d:ec:98:4c:8a:ee:2d:ed:25:c5:f7:45:c4:a8:7e:b2:97:
23:56:87:b4:7f:3e:0e:48:6b:bb:be:11:92:00:33:cb:0b:bc:
dd:73:11:25:b9:77:be:64:44:93:81:04:72:14:8d:bd:5f:54:
39:6e:5d:84:6e:c7:6d:d9:7d:0c:56:2d:9b:3f:25:18:10:d9:
3b:70:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:05 2025 by rpki-client