Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: KgqPv5YsZggkdMw2Sla32e9+uAVfYBc8i5cvJBA5T1w=
Subject key identifier: 4C:37:18:22:1C:3F:A0:E3:69:1C:56:11:00:69:B4:30:41:C9:C9:A3
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 0197D24E83A96DD5C5BD5D56744B850220D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0946
Signing time: Thu 03 Jul 2025 22:00:50 +0000
Manifest this update: Thu 03 Jul 2025 22:00:50 +0000
Manifest next update: Fri 04 Jul 2025 22:00:50 +0000
Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: YlFSh4RgxODSJTUk4y+FyaAQGc0h84ihLErcPYL5M2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:4e:83:a9:6d:d5:c5:bd:5d:56:74:4b:85:02:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Jul 3 22:00:50 2025 GMT
Not After : Jul 4 22:00:50 2025 GMT
Subject: CN=4c3718221c3fa0e3691c56110069b43041c9c9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:87:3f:33:d3:e1:f2:8d:43:90:54:b9:af:
95:73:3f:88:77:18:40:cc:0e:c5:ec:1a:fa:7c:4d:
25:93:d2:34:23:64:59:fc:54:07:60:a6:b6:c1:bc:
21:d6:eb:6e:81:06:6e:4e:ec:21:3f:e8:bf:23:cc:
b4:90:54:ce:27:8c:54:be:f6:9f:d2:23:d8:55:25:
59:fb:5b:0b:c6:09:85:12:fd:14:a7:a0:64:9b:11:
6f:c2:f2:71:05:54:f6:fa:00:94:61:12:16:e1:d7:
39:0c:fa:22:68:b2:27:fc:6e:82:a8:bd:ab:9f:66:
b1:72:b4:c9:70:35:7a:0d:d8:dd:9d:87:a1:d5:84:
c3:b9:c9:08:26:d3:e3:f0:72:35:3f:92:14:5c:dd:
94:c9:28:48:43:1e:b6:5d:71:36:5b:fe:ad:44:2f:
5d:db:21:91:57:cf:df:50:64:e6:a9:f3:59:56:4a:
ae:13:f7:fc:c1:7a:09:a5:5b:11:75:02:f4:57:02:
e1:7c:a2:fb:8a:e0:58:b6:07:75:35:31:81:29:34:
4d:d9:b6:12:37:43:2a:1c:0d:ca:48:e0:19:c9:b4:
b2:9b:be:ad:aa:f7:5c:f5:9b:24:c5:2c:65:70:7b:
08:b4:87:1e:d1:97:e4:8a:26:cc:8a:62:d2:3e:4b:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:18:22:1C:3F:A0:E3:69:1C:56:11:00:69:B4:30:41:C9:C9:A3
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:39:5c:29:8f:0e:e3:b0:82:81:54:00:f3:bb:07:6c:34:b5:
88:b3:59:e3:88:48:7f:ff:ff:ad:ad:53:9a:b8:2b:af:90:4d:
0f:b2:6e:9f:c6:30:f0:b0:c4:00:45:41:9c:34:eb:60:a9:15:
10:72:47:93:46:50:7b:34:8d:b6:07:2f:b5:c9:0d:22:f5:d8:
e8:ab:d4:55:eb:5f:3a:95:55:f7:f9:70:7e:12:f5:0b:8b:0b:
c2:bb:1a:32:66:4c:2a:c0:04:db:cf:72:1e:e9:4e:00:51:7e:
94:8d:3b:a1:0f:85:08:d9:35:62:0a:5f:2d:ff:5b:e3:f3:51:
f0:a0:45:b5:e6:8c:cc:18:13:9b:9a:69:14:fe:2e:6a:e9:5c:
eb:0f:4b:93:70:6b:4a:34:d6:7f:96:18:d2:54:fd:43:d1:55:
8c:7c:2b:d5:1f:b7:f9:11:23:d6:46:69:a9:30:27:20:26:36:
27:c4:9d:07:ed:a7:ac:b1:28:2b:6c:b6:d4:59:29:e6:02:f4:
b7:3f:8e:cd:1e:33:5e:c8:93:01:aa:f3:eb:b8:cd:e3:c3:6b:
4f:a4:78:ba:66:92:f3:7f:bd:48:99:c1:27:f6:c8:f2:c3:1e:
f8:f3:8c:7a:2e:64:9f:83:72:c2:e0:07:b7:77:70:5d:96:a6:
3d:06:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:50:36 2025 by rpki-client