Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: 9MIxotT+n9gYA0MiunXTnzZqrzm3KiD3poFbJRpnTBs=
Subject key identifier: E5:99:36:D1:19:C6:DD:4E:BB:EC:61:69:4D:4F:95:92:5A:66:DB:DB
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 0197B6D7ADCD5B485DF96476898FD1BE9910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: bo9X+hRdT9PBTZHQJtBNAEWTbLY6BeeAfWlAafXnglM=)
2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ad:cd:5b:48:5d:f9:64:76:89:8f:d1:be:99:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=e59936d119c6dd4ebbec61694d4f95925a66dbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:ac:a8:93:c6:26:49:b8:54:1c:b6:66:f5:
77:80:10:f6:0f:ca:c1:53:e5:85:a9:e4:52:b1:79:
ab:4b:ce:e9:0e:af:d2:ca:40:21:44:93:91:b6:82:
39:81:0a:05:94:a4:aa:9b:34:4b:88:02:4f:e5:d1:
d2:7f:b0:ea:74:ad:67:45:cc:56:23:48:37:fa:1b:
3e:c5:e8:f9:5d:24:b2:e2:bc:6a:ee:00:e4:ac:a9:
ff:37:1f:75:b3:11:67:d2:ef:af:a1:e8:8a:3f:8a:
fc:4f:de:94:bf:f4:07:dd:35:ab:fe:51:72:f2:31:
65:66:1f:c2:83:2c:83:03:d6:2a:77:15:9a:82:c1:
9c:4c:51:4d:d3:30:0b:1b:29:ac:2f:87:a2:f4:24:
29:5d:5f:fb:a6:ef:29:7f:5b:c8:8d:df:c5:b8:b4:
09:cd:99:d3:83:01:73:a0:b9:d1:63:8c:81:4b:4e:
35:f1:02:ce:fc:c8:f5:0a:91:bc:7f:be:8e:7b:c7:
0c:f6:72:a7:db:c4:1d:b3:ea:39:1b:24:2b:e2:82:
8a:87:f2:85:33:db:ff:ac:d3:02:14:82:a1:36:cb:
72:1c:0c:16:45:76:63:df:6c:80:1d:e0:f0:4f:f0:
08:23:e6:4d:c0:a5:56:af:77:01:40:4e:c4:2c:43:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:36:D1:19:C6:DD:4E:BB:EC:61:69:4D:4F:95:92:5A:66:DB:DB
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:9a:d6:c5:77:9c:f3:3b:a2:83:e4:ef:49:b8:48:aa:9f:
3f:52:d6:ec:01:8a:f0:a4:76:ca:b4:5f:1e:84:71:c9:74:1f:
17:aa:6c:67:30:3b:34:12:2d:6a:95:b8:15:d4:19:bb:a6:f1:
42:b9:92:4f:31:ca:3b:c7:92:af:bc:fa:51:70:5e:53:89:54:
88:5a:4a:4e:10:1d:70:14:65:31:73:0c:f9:49:bb:8b:9f:17:
d2:f5:3b:81:06:c1:3a:31:a0:cf:66:23:d2:d1:de:ef:8f:11:
d3:75:c5:3c:ed:d1:fa:f7:34:3e:d8:d8:35:90:8a:e8:15:fa:
89:43:31:09:75:bb:7d:5e:5d:6c:40:e9:8d:da:fe:df:34:d8:
19:cc:de:7a:9d:57:ce:c1:de:a6:b0:a0:55:fb:95:4b:43:f4:
31:ba:91:cf:8c:98:f6:89:66:8c:98:45:c0:1a:1a:ce:e9:d3:
64:3f:c5:59:25:00:b4:d9:6e:55:9f:18:25:f4:6b:b5:9c:63:
95:ee:6a:c8:8a:b3:30:a4:ca:49:42:ab:32:f9:fe:19:e9:1b:
41:5f:e3:e0:67:31:5e:7f:73:5d:19:17:0d:3a:41:be:9f:a7:
31:af:f1:ff:67:1f:0b:a4:20:1b:0d:0f:0a:21:07:a9:79:78:
ac:9a:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client