Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: tPFPwBiBRqhGExFxmHa/MlC3p0fQY/ZM4ToRAVtjO18=
Subject key identifier: 3C:D6:CF:C4:C1:DE:7E:29:6B:41:08:DC:D3:D9:74:4A:9D:CF:8E:42
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 0197B7454EEF21D9430B3917258D42E96AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 1537
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: YEzAabSZJOlYdZZ+JnJUZ7ve7STKby2o2dFrqbHiAIY=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4e:ef:21:d9:43:0b:39:17:25:8d:42:e9:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=3cd6cfc4c1de7e296b4108dcd3d9744a9dcf8e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:d2:fe:25:ad:33:20:0f:24:54:07:1e:ad:
6f:ce:c5:bb:d1:94:21:47:94:26:e8:e1:19:d7:35:
c1:a5:e3:47:c0:23:80:e9:bb:dd:d3:56:dd:b2:79:
da:9f:cc:37:22:b9:11:32:94:a2:23:69:78:a2:1d:
14:d8:d5:67:54:78:5c:2e:f9:07:5f:08:ae:34:08:
53:55:c7:2b:2f:c0:c0:c1:fc:88:d6:63:2e:59:43:
44:2a:89:fe:06:8f:5d:1e:fc:6c:13:fe:a6:85:09:
ad:81:19:88:b5:44:a8:f7:94:fe:d6:1b:0d:7e:06:
62:ef:12:82:33:fd:b9:81:f7:58:44:27:db:a3:7b:
ea:c9:14:22:53:97:18:c2:03:37:50:eb:1c:b9:5c:
44:1b:94:6d:55:2f:2a:2b:55:1c:53:fe:db:f6:6a:
d3:6d:00:10:54:04:c1:fc:79:7a:46:cb:c1:02:b2:
1e:d1:5e:c4:b2:73:e4:3b:b1:8d:50:26:24:db:c2:
20:89:2b:13:d9:1a:6c:2b:c0:cb:0c:aa:85:19:c9:
15:eb:ba:4f:04:98:47:c8:10:d6:97:4d:29:a6:5c:
0f:4b:c4:70:19:03:f9:80:af:22:65:f7:dd:b1:32:
f2:52:c6:77:83:4f:75:ea:66:20:0a:bb:b9:2f:11:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:CF:C4:C1:DE:7E:29:6B:41:08:DC:D3:D9:74:4A:9D:CF:8E:42
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:69:cf:18:60:78:42:ce:59:c7:5d:56:01:78:28:59:c4:
87:df:12:4f:26:0c:ea:d5:ac:7a:a7:ea:f8:9f:3f:9d:e1:22:
35:f9:d7:bd:fa:b8:8e:88:18:d0:16:94:b0:a3:2c:8b:31:80:
3c:ca:f1:3b:33:e8:37:67:03:f5:b5:98:bd:10:7b:c6:31:80:
3e:d1:12:fd:3f:56:10:65:a5:84:07:00:7f:c9:5b:2f:c4:40:
78:c7:9d:49:0d:a3:b3:62:be:e3:fc:45:08:13:10:3b:7f:3f:
6e:a0:7f:70:b8:9f:9f:fd:d1:51:c9:7c:80:39:6f:2d:03:dd:
8a:5f:41:5d:84:d8:6e:b7:1f:b1:56:52:f0:3c:3e:04:e6:c6:
76:b6:3e:eb:e8:3d:66:cb:ba:5f:97:3f:50:e7:d8:75:62:b3:
dd:a6:2b:4e:53:5c:71:b8:9e:94:cb:e4:3d:f6:65:33:eb:af:
4b:8d:c8:b4:41:f7:f0:f0:eb:99:86:19:a4:6f:ba:0b:87:67:
3d:35:8d:ee:b8:ad:9a:19:9f:7f:2f:dc:3e:7f:0d:c4:8d:68:
e5:8b:48:90:5d:a9:90:7b:d8:29:74:99:65:ce:1d:c7:eb:46:
73:a0:9d:81:92:7d:04:45:7f:f8:94:51:02:16:cc:5a:ef:22:
0e:62:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:21 2025 by rpki-client