Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: 8tC/XiFl90PyAaw3Mbu4fZmHPBImkVKSSTUkK3FI464=
Subject key identifier: EA:F4:1D:AD:35:63:72:89:F6:4A:B9:0F:06:EA:A2:DF:0C:1F:2F:1B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0197B6D7932C6FF91B88CA0698017DDB8EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0982
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
2: tMAaAfLlucpLRUqgXI0SENiZBPg.roa (hash: f4cNgUh5hxgZxKy+m185e12Dxpodo6iR/S/aAPvG/9k=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: 6ijAD8pP6TlLLSdQFTLH6tvx/T2+ZSlXhL9tBIlC45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:93:2c:6f:f9:1b:88:ca:06:98:01:7d:db:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=eaf41dad35637289f64ab90f06eaa2df0c1f2f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:9c:9b:2f:75:c9:c3:b7:b2:e3:5d:30:8c:
0a:b2:65:0d:f8:99:1b:be:79:54:d9:31:f0:e0:0c:
c2:3c:f0:fe:d1:47:c5:2f:f1:fb:d2:72:7f:52:3c:
6c:70:f0:85:56:1c:06:7b:ea:f3:6c:85:c0:c6:a9:
5f:0f:19:eb:42:da:e8:a1:29:db:f2:a4:d0:03:0f:
b7:03:81:b8:1c:3b:84:cd:be:73:7f:c4:1a:7e:7a:
53:4d:83:2a:90:27:f4:00:03:6f:17:87:aa:eb:24:
cb:13:85:91:5c:d7:9e:7e:db:59:26:cf:78:ac:47:
4d:1d:c6:da:ef:c5:b2:ab:59:f7:be:99:74:15:97:
71:c6:f5:b8:a7:d7:a6:f6:19:de:de:4c:a2:98:76:
b6:47:fa:c8:21:51:5d:b2:25:28:27:fe:f1:65:7d:
18:4e:6e:52:80:3a:8b:e4:5e:22:ec:23:fe:f5:f4:
fd:c2:3b:ad:7d:40:6a:dc:35:e6:98:dd:8e:f2:c5:
8e:75:fa:f5:26:35:96:3b:95:0d:3e:ea:46:23:8e:
31:c2:f3:9f:49:c6:9f:a1:23:de:4d:25:88:2b:24:
2e:bd:7b:3d:7b:33:65:f6:e0:52:d3:e1:fc:74:df:
ff:55:8a:42:42:a0:f4:55:ee:83:d9:86:fd:71:a4:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:1D:AD:35:63:72:89:F6:4A:B9:0F:06:EA:A2:DF:0C:1F:2F:1B
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b8:08:ed:1f:be:ac:f3:a9:ba:94:75:56:c4:a5:6b:13:04:
38:e0:24:02:fc:c4:db:e5:e2:f3:38:54:53:d7:fa:7b:78:e5:
1f:92:f9:f3:44:8c:a3:34:d9:05:fb:50:df:2c:d4:fe:15:9e:
83:7f:42:b7:d3:e0:9b:33:85:e9:38:6f:8c:54:d9:03:cb:51:
7d:08:97:30:6b:83:68:c3:90:b4:21:2f:81:ab:68:09:e6:93:
2a:34:d7:b8:3e:b9:bd:3a:ef:2a:a2:d9:4e:df:c0:ce:6e:fb:
1d:31:1e:74:cc:46:01:b6:9b:f8:6f:bb:4b:a6:9e:44:9d:5e:
12:df:33:c8:91:33:07:57:b3:0d:82:7b:57:2f:b6:f8:2f:02:
4f:fb:fe:91:e8:b3:1c:f6:ee:2c:6f:b6:d9:42:fd:8f:04:f9:
86:13:20:db:f6:a9:e6:ee:e1:74:ab:77:31:ed:82:21:21:82:
74:0a:84:82:34:75:bb:1a:ae:2f:f8:81:33:b9:b5:a1:40:b4:
fb:3b:b3:de:35:59:8b:db:cc:44:ca:20:05:4b:54:6d:6c:d1:
1b:ef:f7:43:d0:29:91:08:ac:99:1b:50:b7:b5:50:60:1f:80:
94:d7:a4:3d:ee:a5:66:1f:48:eb:19:43:1b:8a:9f:04:3b:e9:
e7:d8:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:53 2025 by rpki-client