Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: aU/0xewrspE9SpkuNCSNEt+Esrf5lWPWQxNONJFbftA=
Subject key identifier: 26:8A:80:D3:48:2D:CF:90:84:DA:44:1A:85:CA:4C:47:7E:25:8B:26
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 0197C4CA0259AFE5A5B5A73519A822213FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 13C7
Signing time: Tue 01 Jul 2025 07:01:02 +0000
Manifest this update: Tue 01 Jul 2025 07:01:02 +0000
Manifest next update: Wed 02 Jul 2025 07:01:02 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: 3OU4FrREkPmUgLEYzMYo1LpHZ+wGWUqtZh8BjOfF8Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:02:59:af:e5:a5:b5:a7:35:19:a8:22:21:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Jul 1 07:01:02 2025 GMT
Not After : Jul 2 07:01:02 2025 GMT
Subject: CN=268a80d3482dcf9084da441a85ca4c477e258b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:38:1c:7c:fb:c5:33:f5:54:7f:92:af:62:
8a:dd:ae:2f:32:44:f6:12:e6:99:90:28:ac:cc:ad:
d9:23:29:f1:bf:e1:bd:f3:26:af:12:3a:9b:a2:66:
c1:a8:11:f4:7f:b1:96:2c:eb:32:18:39:c9:0b:25:
98:1b:51:b3:ff:09:44:2f:9e:96:91:6d:7b:ef:21:
b5:d9:9e:61:63:88:90:90:4f:5c:ed:17:76:37:4a:
f4:d9:86:2a:08:c9:d1:8f:b5:2d:a5:b7:fb:08:ca:
63:5e:fc:5e:67:f3:9a:18:91:51:38:04:db:67:c4:
4c:54:43:e9:aa:f4:fc:b8:55:f4:a7:c8:50:b8:0e:
38:6e:0d:4a:9e:ef:67:9b:05:b4:50:cb:6e:00:01:
71:03:6f:ca:0a:25:23:50:15:a9:3d:6b:51:a5:2d:
24:8a:cc:aa:1a:b3:7b:f6:2d:c0:94:cf:1c:63:17:
1c:c6:47:57:10:7f:58:9d:15:e4:e2:ac:44:4e:e6:
a9:5c:dd:04:55:c1:e8:7a:51:08:f9:4f:fc:69:79:
82:2d:e1:c5:fe:5a:76:a4:8f:b7:70:0b:76:a0:6c:
bb:cc:b2:c7:37:ae:55:85:07:19:e9:84:ca:b8:08:
1e:68:c0:e6:b8:65:9a:f1:9f:f2:24:34:17:41:7d:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:80:D3:48:2D:CF:90:84:DA:44:1A:85:CA:4C:47:7E:25:8B:26
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:40:1b:9d:5e:a3:aa:a5:02:4e:e3:e9:04:59:36:1d:b5:
74:b8:52:dc:68:0a:8e:fe:74:d1:86:97:29:0e:4e:92:99:e4:
a1:6c:9a:ea:5d:41:27:9a:63:8b:51:f3:27:62:d1:ed:02:86:
5c:4e:fa:0f:f7:b7:55:70:ae:7d:74:93:16:b7:e0:b8:0e:fc:
98:48:68:a8:4f:9d:ae:2c:a1:46:cb:00:06:ca:5a:57:d0:49:
10:5e:7b:01:f7:c5:d8:65:eb:dd:f7:aa:6a:c1:42:7e:3e:12:
06:c6:e3:f4:72:4c:03:1f:96:08:95:5f:d3:14:03:60:3c:fd:
5d:6a:b9:2a:a7:17:f2:b2:81:79:c8:2c:fa:4a:6a:b5:a2:f9:
20:f8:c5:2b:af:6b:57:76:38:ba:c4:bd:5d:01:a8:b2:34:c2:
d7:11:bc:68:af:b6:5d:df:05:fb:0f:c7:83:02:cf:81:ee:2d:
89:dc:15:c0:cd:9b:71:12:41:2c:c3:c3:c9:ca:ab:06:cc:23:
1f:64:39:25:99:1e:1a:20:d2:de:de:98:46:82:01:5d:f2:5b:
d6:1b:82:11:84:2e:ac:5e:e1:b2:3f:ef:25:97:13:34:cd:1d:
67:db:a3:f6:0a:4c:d5:cc:9a:0a:e4:5d:6b:21:12:75:7e:20:
5f:db:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:07:29 2025 by rpki-client