Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: uKPpBKCTlB4tS1xP4uRcAiI9SpaZ0/23kjeAC3/V5ZE=
Subject key identifier: B2:27:44:57:08:96:66:D7:91:55:79:6E:72:43:80:A7:65:A5:BE:23
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0197B820D358E8C7ED8E4FBC6A5D6A6DC38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: zdZW5v4Y9LoQOIOq/FBsJbmzwqvCoQbQVp3ST9rCJmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d3:58:e8:c7:ed:8e:4f:bc:6a:5d:6a:6d:c3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=b2274457089666d79155796e724380a765a5be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:45:14:bc:9f:54:cd:63:dd:22:ba:01:08:
36:10:1e:ef:31:0f:6a:ea:d1:fe:d9:5b:fd:d5:09:
f8:fa:1f:9c:0d:a0:44:af:1f:5d:8d:6d:48:c2:ea:
a9:67:58:f5:d0:9d:38:a2:d8:e6:11:53:62:47:92:
e9:10:08:92:39:b0:1f:4c:9f:e4:a1:4b:f9:7b:54:
5f:81:f1:80:97:02:ea:10:bb:73:57:3f:eb:f3:2b:
21:a4:78:49:49:76:31:c5:56:d9:9a:64:bb:d5:bc:
28:38:b2:70:bf:92:f9:32:bc:07:a8:5d:40:96:91:
d6:b4:12:47:76:88:19:75:ce:75:fc:de:c9:1b:3a:
ba:c9:08:5a:d4:b2:8e:46:08:22:7d:58:58:28:64:
77:81:a0:74:33:d1:31:a1:20:62:3f:9e:ee:87:30:
79:f7:e4:da:37:d4:93:41:76:d1:67:a5:5f:6c:3f:
22:2d:2e:92:80:7f:ab:38:d9:a8:37:65:b7:46:13:
c6:21:0d:34:48:93:21:ec:e6:41:35:9b:5d:70:90:
6c:88:4e:be:70:38:ff:44:93:68:76:de:35:96:22:
9c:e8:1c:33:31:70:3e:26:6d:bd:2c:86:7b:61:fa:
7d:60:ac:07:1a:84:de:ca:b7:66:67:03:c9:4a:11:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:44:57:08:96:66:D7:91:55:79:6E:72:43:80:A7:65:A5:BE:23
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:ab:5a:e3:7e:c3:40:21:55:f0:6b:3e:9a:33:bc:2c:ec:
cb:e2:ce:28:2c:0a:79:21:69:d6:14:be:2a:f1:1b:92:f4:02:
9e:15:94:92:88:ba:3b:97:67:a9:7f:8f:30:f6:54:a1:c9:8d:
af:19:49:a9:52:0c:09:09:81:84:83:09:b5:cb:e9:a5:d2:3d:
23:a3:bc:7d:36:c4:16:61:a9:24:b7:d6:bf:d6:8c:1e:00:25:
c6:fc:a1:1d:03:66:32:08:03:2f:7d:9e:fc:b8:87:5e:a4:e1:
b8:44:8b:88:9f:9b:b4:03:31:19:e7:58:01:00:86:28:c5:89:
72:12:63:55:b4:44:de:f6:d5:eb:a3:62:94:65:1e:10:0e:44:
5a:ad:aa:17:4d:8b:78:3a:90:93:bb:d2:18:d2:1c:68:55:22:
4d:94:a2:75:17:af:6d:92:f4:a9:f6:48:6e:78:b5:6e:a7:c9:
b4:6c:11:f3:5b:8f:b2:74:94:f3:fc:a7:98:7b:61:fb:70:e4:
83:fa:14:95:fb:28:56:3a:fa:be:f7:3c:59:eb:2d:2a:c7:9f:
d9:84:ec:5e:3d:d4:14:c2:80:cf:8e:59:4c:ef:cd:82:a8:3b:
e6:47:54:87:a5:a8:28:76:6a:b0:e5:fb:e9:0d:bc:df:72:f7:
3e:7f:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:43 2025 by rpki-client