Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: OVVVuY2vnZWGMvd81W6dcDU6b3Fx1d3y1JvIxdwbIDA=
Subject key identifier: E4:E8:F9:DC:AA:0F:7D:E2:0A:77:4A:FC:A5:E1:F2:26:C6:69:85:96
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 0197B5FC657128D91CC791D5BDED5B67D277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0CDA
Signing time: Sat 28 Jun 2025 10:01:46 +0000
Manifest this update: Sat 28 Jun 2025 10:01:46 +0000
Manifest next update: Sun 29 Jun 2025 10:01:46 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: mWZsoaxrJSzZrxBGmQnCADIZ1fFe5F3xCi3Oz1tz4H0=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:65:71:28:d9:1c:c7:91:d5:bd:ed:5b:67:d2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jun 28 10:01:46 2025 GMT
Not After : Jun 29 10:01:46 2025 GMT
Subject: CN=e4e8f9dcaa0f7de20a774afca5e1f226c6698596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:61:ad:14:d3:44:27:c0:50:ce:ee:c0:dd:
83:dd:f9:09:4d:5a:da:fa:26:51:34:00:dd:84:d4:
d8:9c:0d:03:e8:cb:85:d1:e7:05:cd:94:91:cf:9f:
28:cb:4e:e0:29:e1:5e:da:80:da:60:3b:b4:3e:8d:
3e:0f:c1:3c:fc:fe:03:8c:9e:7a:27:13:5f:f8:9f:
fa:07:d0:92:15:c6:05:26:ce:cc:84:23:1c:9e:c7:
9d:fe:30:8e:13:8e:3e:26:bc:a7:a4:34:48:c7:83:
6b:c3:90:d1:47:e5:8f:3c:09:4c:4e:9c:fd:d3:f2:
17:3f:e5:e7:a4:48:e2:73:8b:f2:a5:aa:4f:a6:b0:
ae:ae:72:6d:c2:1a:62:52:7e:9e:7c:a1:8a:68:11:
a2:b4:32:f4:de:0c:f3:d6:75:50:e4:c4:3a:95:fb:
b8:8d:19:35:1e:f9:d8:e8:4e:1c:68:0f:03:e6:35:
c2:01:0d:4e:5b:0e:f7:2e:41:a5:c5:2f:38:a2:a0:
b8:11:21:30:2e:2d:d8:48:ed:16:9a:2c:95:c4:d3:
e6:24:15:4b:ec:cd:7f:e2:74:7a:da:e0:66:25:ed:
51:48:dd:b1:5d:40:cf:8d:1e:df:48:cc:2f:e7:8b:
49:dd:10:99:5d:8d:5d:b8:90:f4:cf:be:b4:6e:87:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:F9:DC:AA:0F:7D:E2:0A:77:4A:FC:A5:E1:F2:26:C6:69:85:96
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:83:80:a7:9f:2a:1f:a4:40:4d:79:53:bd:01:24:0e:9d:
7e:99:63:1d:23:9a:51:44:ff:72:8b:89:4a:b6:e4:2a:d9:85:
36:43:25:5c:67:1a:32:70:23:2f:20:39:db:26:37:fd:e7:51:
18:12:7a:bf:43:d0:24:fb:c6:ec:1f:05:5f:41:15:cb:97:a1:
2b:1d:45:2f:40:20:41:90:d5:74:cd:60:8d:75:39:4a:d1:06:
75:c6:dc:c0:e0:08:32:ee:1a:be:15:9b:51:30:85:8d:1c:88:
dd:9c:9b:57:2c:7d:40:bf:c4:e7:f1:03:95:34:c3:51:ea:9a:
d8:6b:c7:78:e5:f0:8f:a2:5d:70:aa:b3:1d:33:be:24:a9:f6:
ac:e3:c6:40:0a:85:bc:9d:cd:ff:8d:5b:c2:e6:58:1b:7f:e2:
37:d4:45:01:e0:c0:77:c7:34:25:a0:86:fe:ae:7d:51:65:43:
96:f4:aa:4d:75:16:cc:8f:33:85:6a:b3:12:eb:75:17:4e:66:
ed:30:49:f2:ac:3e:a7:c1:96:15:41:44:cc:91:11:c5:7e:83:
c3:01:28:5f:0a:ee:90:3b:d4:9f:b7:29:62:b3:f7:f4:ff:f6:
59:04:4e:b7:ff:1a:2f:01:28:b5:52:80:db:e1:e5:59:a3:c2:
b2:89:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:48 2025 by rpki-client