Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File: uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier: PR5gvhgbdXswk3OHaS/NHEj1fw9A3wie5kOLheqeT4s=
Subject key identifier: 66:7E:AC:65:86:95:AA:76:C1:B0:55:F6:54:36:E2:C7:62:50:34:CE
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial: 0197C45C1850E6D2869F24ADDB983E68F829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 05:00:59 +0000
Manifest this update: Tue 01 Jul 2025 05:00:59 +0000
Manifest next update: Wed 02 Jul 2025 05:00:59 +0000
Files and hashes: 1: Ax6Gu0A1WVAMHnMyLh3B32000sA.roa (hash: iBKFcxVigEAfe9uJMe9wdFyXZBq4/nsbINBCDNHDxXI=)
2: fiUjLhELITdpDid32o55NdTSDUs.roa (hash: 94ZZevlA/NkXuzZUHS2Qq6u93TDFYKoJju0eXiF70b0=)
3: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: gVau3pzhhAGL6twJ/M1kykogOKVv0CWz9iOSdXzRTig=)
4: v7faT88h9FQXwmd6ooV79XLEuDc.roa (hash: CNgJmJnrj1ZC4LjfHCAq1xid9gV3zArUgelpQMRzNq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:18:50:e6:d2:86:9f:24:ad:db:98:3e:68:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
Validity
Not Before: Jul 1 05:00:59 2025 GMT
Not After : Jul 2 05:00:59 2025 GMT
Subject: CN=667eac658695aa76c1b055f65436e2c7625034ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:d9:b7:81:12:4e:74:dc:78:c6:bb:c0:1b:
ef:79:63:be:ca:c4:34:5f:6c:62:01:85:63:73:89:
b6:e8:35:90:65:06:f9:82:b8:5d:bd:7a:2f:9b:1b:
c0:e5:a5:d6:35:d8:f3:73:a0:9b:4b:67:07:10:ff:
0b:3c:eb:97:8b:43:8b:f5:34:64:5e:59:36:3b:73:
ff:72:48:4d:4d:f8:09:ed:c8:93:14:d8:f8:61:08:
d2:cb:2b:c8:64:14:44:58:73:01:c5:9c:55:4d:22:
f7:a4:74:31:27:79:d6:ba:8e:a5:1e:03:f4:ff:a0:
04:59:b7:8f:99:89:bb:f0:3b:ef:43:fa:01:1a:30:
31:92:84:a4:a8:94:f2:c7:44:98:7b:65:42:6f:66:
e7:f3:84:5d:31:b4:2b:85:54:55:8c:e4:15:ee:29:
0a:86:46:6d:0b:5e:70:22:ef:1c:82:35:44:50:72:
00:25:6a:de:21:b9:33:8d:73:a8:85:c8:9e:e4:11:
2e:db:59:87:6d:22:e8:c4:48:f5:49:bf:56:57:90:
f2:72:5f:a2:36:6b:78:34:5d:30:df:b5:c3:16:e7:
a9:61:f9:78:b2:df:62:02:5d:84:ea:cb:e6:32:78:
b4:ab:fc:49:21:db:e1:b3:72:79:a2:99:12:4e:f2:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:AC:65:86:95:AA:76:C1:B0:55:F6:54:36:E2:C7:62:50:34:CE
X509v3 Authority Key Identifier:
keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:4b:09:63:7d:e6:85:ba:fd:59:44:79:0d:13:23:2c:53:
5d:f2:45:92:67:1b:f3:b4:11:26:b5:b6:26:74:a2:81:7b:ae:
13:fe:16:08:0b:77:7a:e4:f1:24:bd:68:1b:93:36:fd:79:f5:
4f:01:e6:59:af:a3:26:b7:ef:67:d1:83:78:7e:ea:06:0f:6a:
c6:e5:cd:ef:03:2b:45:50:22:5e:9a:d8:22:a5:72:42:e0:48:
7c:8e:a6:f8:15:56:51:b6:87:15:37:88:fa:de:70:7c:b5:6a:
c7:de:74:46:37:7f:f6:f5:8b:ca:47:43:0e:af:4a:f6:dd:d1:
f2:16:5b:dd:26:d8:55:80:4b:bd:87:38:93:a3:1f:10:f4:51:
c0:6f:fb:c8:e2:74:80:53:43:ab:45:e4:dd:2c:c2:43:43:45:
a0:2d:59:6b:e1:ae:b1:4e:8a:d6:7f:c5:a7:f1:86:0b:3f:2c:
3f:da:e5:81:ec:66:e6:19:d7:ca:9b:3d:8b:e8:de:5a:8e:55:
22:4c:2e:01:4c:54:17:7f:93:e7:29:14:96:eb:f8:8a:19:17:
bd:23:2b:b2:b7:57:f4:c1:65:4e:a4:7f:de:4d:e0:6d:4a:50:
61:7a:9c:ac:b6:33:c3:11:7d:75:d8:17:3c:46:f0:ec:c7:1d:
82:bf:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:44:35 2025 by rpki-client