Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: 3+KdVDqH8plT9I4Hhkpryo2ux04KEA/3v9MK3RzK8b8=
Subject key identifier: 37:8F:92:58:5D:DC:B8:E3:F9:D8:DF:17:A8:FB:52:52:E2:22:3E:61
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 0197B6A077692F52685448F7C54DEEEE2742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 09BB
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 4wiffE1IaA339D+aMcJcsKWy3GRDwBjXH/WXX1tY2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:77:69:2f:52:68:54:48:f7:c5:4d:ee:ee:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=378f92585ddcb8e3f9d8df17a8fb5252e2223e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:8d:65:84:22:8a:62:89:64:b7:5d:8c:a6:
7b:1b:0c:1b:b6:70:21:61:79:50:0d:c7:10:2d:fd:
a0:34:f3:ab:cf:5b:4a:60:7c:36:47:74:8d:e9:84:
02:71:7b:ce:62:13:5c:d4:00:d6:74:2c:38:1c:4a:
bc:50:78:e8:24:e5:34:33:46:60:bf:57:17:0d:a4:
01:7a:42:da:f5:65:11:55:4e:88:fc:1d:f9:2b:4c:
6a:e6:c2:78:23:7e:5f:fb:70:f8:db:37:98:17:5a:
89:29:fc:8e:99:bb:d5:5b:e9:c8:9c:f4:b9:41:ea:
d6:b3:42:48:bd:f3:5a:2c:83:be:25:de:43:ad:fa:
e8:05:87:bf:90:8a:e1:63:9b:fd:9e:e5:18:a7:48:
de:e6:16:2d:7d:c8:63:d0:63:72:d4:cf:7f:e1:6c:
d6:59:45:81:7b:ad:39:0f:28:60:60:8d:63:24:26:
20:a1:a3:0a:ca:de:af:f6:1d:4c:96:a9:3a:5d:a7:
66:12:62:3b:c0:51:e9:af:93:c3:22:cd:aa:23:e8:
13:3c:e1:99:29:b0:03:40:a2:9f:82:f3:9c:e3:60:
73:d6:c1:ee:84:06:9f:da:16:ea:7c:85:17:25:93:
93:2b:47:c9:1f:38:ff:df:80:b6:00:f6:23:4f:2b:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:92:58:5D:DC:B8:E3:F9:D8:DF:17:A8:FB:52:52:E2:22:3E:61
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fc:f3:fe:cb:92:0e:7a:8e:df:c5:94:2a:97:7b:7d:ba:bb:
58:a6:f5:7c:6f:ac:b1:c0:52:b7:5a:32:a6:83:cc:c1:6b:4d:
d8:3c:10:57:c2:a2:24:3f:bb:e0:7c:d7:80:b6:41:bd:2d:d8:
32:33:e6:29:2c:41:7f:3b:cf:d7:13:4d:77:57:29:e5:b0:2e:
0f:c8:b1:5d:b6:b9:77:cb:f5:a0:4d:51:b3:bb:3f:68:92:86:
47:16:e6:d1:b2:de:63:83:b5:f7:c1:e3:03:08:57:5c:31:65:
cf:08:7d:03:4a:33:f6:b0:19:1c:c9:fe:1f:75:e0:74:48:ce:
c4:35:ee:91:6f:47:35:b0:ba:4b:c1:2f:a7:d9:26:36:61:4c:
13:9e:6e:1c:c4:7a:cb:35:4f:fb:e6:47:c0:8d:15:7b:ec:41:
e6:35:ab:88:04:8b:62:22:42:5f:4e:53:bc:6d:76:b2:72:59:
ba:28:37:49:c5:c9:8a:c9:89:db:a8:c1:8e:b2:84:ce:fc:76:
a3:a1:09:54:b0:8d:03:c8:bc:43:fa:c9:1f:af:17:b9:e8:23:
9f:f0:5e:e2:32:bf:10:3d:b2:3c:c7:60:35:f7:da:fd:00:27:
4c:83:49:99:ee:06:3c:2a:04:46:50:fd:00:c6:98:ac:29:f7:
60:80:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:01 2025 by rpki-client