Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: /795Zrc8+GavC7zvdVROrEFLdFbmn2yl4O/SrQ0lk0M=
Subject key identifier: 69:4C:10:E5:C9:46:43:63:B8:9B:CE:53:75:FC:98:EE:05:D9:F2:3A
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 0197C237AA34B966046C6B89091AF7541B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 1568
Signing time: Mon 30 Jun 2025 19:01:57 +0000
Manifest this update: Mon 30 Jun 2025 19:01:57 +0000
Manifest next update: Tue 01 Jul 2025 19:01:57 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: FhCbdVS0Ql3fEytNtiE3tFZ02kpbr/7BDf25Qr+kaN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:aa:34:b9:66:04:6c:6b:89:09:1a:f7:54:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Jun 30 19:01:57 2025 GMT
Not After : Jul 1 19:01:57 2025 GMT
Subject: CN=694c10e5c9464363b89bce5375fc98ee05d9f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:45:00:48:17:eb:d9:73:6b:bb:56:17:f6:
c6:0e:6d:43:45:3f:72:07:76:08:16:57:1f:37:90:
06:c2:3f:c5:72:2e:25:3f:ad:7e:5f:20:e0:d5:91:
5f:ee:35:c1:88:46:69:69:ff:a2:28:4c:88:eb:db:
df:97:9c:71:13:8b:19:69:14:2d:b8:05:8b:26:2d:
b2:fe:14:dc:15:02:77:76:98:e4:32:26:6f:54:cd:
85:05:46:11:77:88:8b:01:c0:4b:8a:75:20:11:23:
35:6c:91:63:0e:3a:fb:8f:59:71:bc:73:f7:8e:33:
1d:df:cd:b2:86:d8:19:b6:e0:83:0d:03:ee:cf:81:
a3:e2:4e:2c:91:e8:92:91:00:6a:89:92:80:57:a5:
e1:80:8b:de:2c:59:2e:0e:af:db:6d:ee:2b:a2:1f:
71:54:d7:40:5a:25:ba:9a:75:8b:15:f6:66:2c:29:
75:cb:f9:98:96:fd:75:af:e5:1b:d1:bb:6a:65:aa:
0e:0a:c9:5c:56:bf:ee:3a:fb:53:6d:c4:c7:f2:f6:
e6:38:ca:05:48:4d:9f:67:5c:49:60:14:cb:53:84:
f0:ca:49:c9:1d:c3:64:29:62:b5:2a:8a:24:31:8b:
6c:29:37:73:e4:41:d0:31:f0:5b:64:24:fe:8c:9b:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:10:E5:C9:46:43:63:B8:9B:CE:53:75:FC:98:EE:05:D9:F2:3A
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:4e:be:ee:e3:4a:8b:ae:94:dd:3b:3a:9a:1e:ac:a1:17:
5e:de:11:ec:cb:42:04:4a:94:b1:7f:9d:b4:70:3a:d8:c0:1f:
7c:0d:e4:ac:2d:13:bf:19:91:56:f6:79:5c:db:39:92:4c:5e:
19:ce:60:ef:12:e0:19:98:38:27:56:e5:b7:5d:8d:24:66:52:
1f:a1:a8:1b:b7:59:48:4a:f1:e0:6a:70:8c:f5:c5:9a:bd:a4:
44:57:da:d1:f7:f7:71:f6:38:89:86:bb:f5:7c:44:13:3e:7e:
bb:a6:12:87:21:cf:f0:f6:20:59:56:b8:2b:c7:99:6f:a6:4b:
03:57:64:62:ec:bf:5b:f8:56:f7:79:07:c5:03:56:f8:f1:3f:
de:25:ca:6e:fc:55:ee:ad:ab:de:cc:ea:68:a6:15:fd:1e:d9:
f1:5e:34:83:c5:c8:0d:5e:48:c8:0c:0f:1d:f2:f5:1b:ae:60:
8a:b0:b7:d7:c2:7c:73:40:4a:dd:f0:19:34:88:12:7c:00:d2:
e0:eb:77:b0:cb:6b:dc:bc:7a:5b:c7:34:2d:6c:73:a8:bf:ca:
f5:4a:57:25:42:1a:99:da:5e:e7:1a:85:7e:29:61:0c:81:85:
90:f1:58:6f:0d:19:28:51:67:9a:24:53:b8:f3:86:4e:2d:14:
96:6a:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:10:08 2025 by rpki-client