Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: z5yGhgHUFzE7jYYsLqle430YOrVClMrgr2UXSUiTdeY=
Subject key identifier: 65:B0:B0:91:B1:86:51:FC:70:8A:21:95:68:BB:93:2A:3A:4E:CA:88
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0197B6D792C9C41191A6B34EC20DA3620A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 01DA
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: YrpFiNCvgAEDnEwUaN8tq8jYqm5m46/J8YgMWbSpF8w=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:92:c9:c4:11:91:a6:b3:4e:c2:0d:a3:62:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=65b0b091b18651fc708a219568bb932a3a4eca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:aa:76:1c:23:33:5d:a6:eb:3c:aa:50:76:
b9:ad:c2:bb:70:ac:30:cc:99:c4:63:e5:a6:aa:41:
38:a0:17:e3:1d:bb:73:22:df:fa:df:58:7b:a8:fd:
39:f1:16:96:f5:3e:df:03:4e:c5:c8:c5:18:27:ce:
aa:e0:73:ef:a8:54:c4:c0:4c:fd:08:d1:b6:a8:d7:
a1:0f:5f:7f:de:a8:46:e8:d3:01:a1:f3:ac:c8:8c:
9b:67:5d:c2:f7:03:b1:99:3b:86:5c:a3:4d:b2:af:
35:8e:32:39:8a:31:de:6d:3f:a8:11:8c:91:89:1a:
67:54:eb:39:80:26:84:83:de:17:2c:59:11:5f:4b:
54:3f:48:ca:dc:80:4c:2c:fc:7f:57:d8:52:74:e8:
1e:a6:42:5b:a0:37:d2:e6:ef:e5:10:68:d7:b0:40:
e4:8b:0a:5d:9d:96:61:1a:1f:19:ab:4f:ce:78:eb:
24:16:a5:c9:4c:e5:1c:a5:72:db:f9:c7:19:c7:b3:
ed:b0:c2:4d:22:d9:6f:32:0d:54:be:2e:ed:fc:2d:
84:3f:62:32:53:67:e3:07:a6:7e:e5:b0:22:4f:15:
e9:75:02:61:d2:96:72:7e:9c:14:5a:5f:6c:95:68:
c4:ea:25:9a:f9:9a:e4:ee:ce:ac:67:d4:46:d7:de:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:B0:91:B1:86:51:FC:70:8A:21:95:68:BB:93:2A:3A:4E:CA:88
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5d:1f:28:db:56:b9:72:b4:d7:ac:fa:b3:dc:fe:a6:ff:bb:
85:ae:65:92:1a:f9:f3:4a:dc:05:9c:de:29:53:09:6e:b6:2a:
c1:ba:11:ad:e1:9b:9a:f3:cc:fb:8f:dd:e4:c9:d7:68:b8:bc:
26:a8:5c:b9:79:6c:8d:7a:55:d0:27:8c:58:18:0b:23:a8:d0:
f8:de:99:b0:34:e6:82:bb:49:f4:88:de:73:43:51:19:44:10:
03:59:19:4c:14:d8:55:68:58:6d:16:a8:a6:b4:4c:0b:e9:3e:
90:bd:e8:5a:f3:9b:bc:fd:50:df:14:7e:d4:f9:19:af:ef:11:
a6:c4:0e:cc:9b:34:a8:16:35:03:13:bc:cd:e2:3c:15:4c:47:
f5:62:5b:a9:a3:ea:ae:ba:14:43:75:25:22:98:07:0b:8c:33:
f4:f5:06:6f:12:27:5d:8d:6e:85:c0:63:09:7c:dc:38:fc:8e:
11:c0:32:df:d9:41:2f:36:a1:26:2a:b7:d0:1f:db:31:70:6e:
0c:d2:72:4f:66:1c:75:82:75:ed:55:2e:b7:38:ea:fb:fd:ab:
29:d0:b9:09:1d:e1:d5:26:ea:58:6e:69:c5:73:63:06:2a:51:
fd:eb:66:cd:a6:32:4d:2b:14:f3:ae:e7:31:0b:50:66:66:56:
95:61:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:29 2025 by rpki-client