Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: vtfRGrfmJhjq8gAnYeSuSvmwE/XUp9gurr2hiD8IeUs=
Subject key identifier: F2:52:7E:31:C7:F4:D6:EA:23:9E:60:73:77:AA:6D:BA:E7:BA:EB:5A
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 0197C726869DF9CB2EFFCABA67AE54694F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 09FA
Signing time: Tue 01 Jul 2025 18:01:20 +0000
Manifest this update: Tue 01 Jul 2025 18:01:20 +0000
Manifest next update: Wed 02 Jul 2025 18:01:20 +0000
Files and hashes: 1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: yVY/8wZw+0v6OtvdJ8yhqcZ20eqJc4G302/AZIdqABw=)
2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:86:9d:f9:cb:2e:ff:ca:ba:67:ae:54:69:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jul 1 18:01:20 2025 GMT
Not After : Jul 2 18:01:20 2025 GMT
Subject: CN=f2527e31c7f4d6ea239e607377aa6dbae7baeb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:4c:1e:84:28:c2:73:10:57:8b:f2:fd:05:
e6:37:d4:a6:3c:10:22:c9:1a:1d:af:f5:ac:8a:37:
20:dc:50:7e:fa:3d:ba:80:09:88:57:1a:90:16:8f:
9a:d1:52:99:e6:59:45:b6:3d:f4:53:73:d7:de:fd:
a5:a1:cc:02:5e:31:86:9c:59:81:02:d4:12:5a:e0:
a8:72:a0:ad:bc:b2:5e:b6:d9:12:09:8d:72:5c:f7:
eb:03:80:24:cc:b7:03:1d:db:67:d8:d9:af:99:7f:
19:c5:ac:9c:55:96:60:df:44:ec:30:fb:5f:f0:40:
9f:a3:dd:fc:11:c8:1e:a6:b6:f7:54:db:d0:8a:d8:
c3:01:2d:f6:11:f1:8b:c4:6b:83:49:45:bb:29:2d:
75:a8:74:db:c1:cd:9b:d5:15:e3:93:53:bb:f7:1a:
06:82:2d:cd:a2:01:e7:b1:39:58:2a:0b:d3:32:5a:
be:78:bd:cb:9f:ba:c4:01:61:d5:b0:82:2a:42:dc:
6c:86:cb:83:22:62:44:cb:01:5d:87:9b:9a:9c:9f:
28:32:bf:9a:37:a2:c4:ac:ad:b9:16:41:53:cc:b4:
f9:00:03:45:a0:79:a7:13:d3:57:24:ce:1e:e9:4b:
ef:d7:d4:d1:37:38:86:1a:2e:ac:1b:14:af:0b:bc:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:7E:31:C7:F4:D6:EA:23:9E:60:73:77:AA:6D:BA:E7:BA:EB:5A
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ef:4e:73:d6:7f:ac:c7:24:d4:1c:6f:3f:3c:e8:64:c7:5c:
3a:34:27:e1:55:31:ff:c1:c8:08:43:dd:6f:2a:6f:7e:ed:f1:
19:cd:c9:c9:c1:b1:e7:27:66:b9:cb:ff:75:a3:7f:da:21:bc:
75:ab:a1:c0:71:7f:24:c7:4c:3e:d9:62:f7:71:56:32:cd:fc:
a3:ce:f1:c7:87:8f:5f:59:61:3e:5d:9a:29:7e:5e:e0:7f:ed:
1a:d8:05:98:3a:70:5b:9f:f3:f3:7a:82:c9:b8:66:be:9f:a4:
a3:de:43:73:c2:e4:b9:5a:66:1d:dc:52:e6:12:d3:98:26:73:
41:19:4a:85:e5:7d:ab:79:74:53:58:a0:5a:64:89:c9:d5:ec:
ff:b2:1e:8c:56:09:e6:1b:92:4a:89:e4:49:55:05:f3:7c:2c:
29:64:3d:bf:ee:4d:92:d8:17:fa:2d:ef:3c:f3:33:25:41:db:
b4:56:f7:7f:90:df:28:c3:2c:82:9e:20:22:f9:0b:06:1c:54:
bd:18:3e:7f:d1:08:25:3e:d3:0c:88:99:55:8d:b2:f7:4e:1d:
c9:9f:7e:d7:57:e0:c6:c8:8b:57:23:66:aa:27:a1:81:24:c4:
df:66:aa:67:e9:11:a7:37:60:55:c8:1d:a8:a9:f2:3f:cd:9e:
df:fc:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:26:49 2025 by rpki-client