Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier: gGMgjdV6reBjveAgqgFzElRNsXxrd4zwkkHTGGKpFXs=
Subject key identifier: 48:D1:BE:98:83:DD:CA:DF:2D:38:F7:9E:E7:B3:EA:D9:63:0F:21:B4
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial: 0197B88FC160E62049C229A17479001D68C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number: 04A6
Signing time: Sat 28 Jun 2025 22:01:58 +0000
Manifest this update: Sat 28 Jun 2025 22:01:58 +0000
Manifest next update: Sun 29 Jun 2025 22:01:58 +0000
Files and hashes: 1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: vZL5RX2QFLMJ8OCJ2e7I7OxQdzvkecnJiHQH3jgWb5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c1:60:e6:20:49:c2:29:a1:74:79:00:1d:68:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
Validity
Not Before: Jun 28 22:01:58 2025 GMT
Not After : Jun 29 22:01:58 2025 GMT
Subject: CN=48d1be9883ddcadf2d38f79ee7b3ead9630f21b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:ac:fe:8b:24:50:6d:f6:7c:4c:ba:c2:e9:
16:cd:59:4b:bf:0d:ba:78:ab:58:2d:a8:ac:83:94:
d3:1e:df:c6:a3:ac:4a:04:8a:f5:be:9a:ba:1f:05:
1f:4a:45:29:d3:b5:eb:c0:c6:a9:72:45:ce:19:1b:
20:a6:43:7c:59:1d:f9:15:1e:27:b0:e8:eb:27:4d:
6e:a1:e3:75:01:0c:29:44:2c:b8:12:4b:2b:74:f3:
a6:a4:06:d0:42:0c:24:64:92:2c:c3:c3:3d:85:86:
44:37:e4:72:f8:a8:e2:4a:05:8f:d3:66:35:8d:5c:
03:fe:e4:df:45:a6:9f:b3:9f:32:bb:3a:8a:da:23:
1b:e6:68:2f:c5:e2:78:e0:bc:78:09:eb:1c:2e:20:
57:fd:41:ff:12:97:76:e4:22:1d:e1:d4:83:f4:eb:
04:30:04:d6:15:3b:ae:a5:64:9a:26:82:6f:3b:46:
86:f8:a5:21:41:74:d3:ac:39:cf:97:6c:43:30:f9:
e9:2d:ce:b6:c4:34:77:06:02:3f:6c:87:98:e6:39:
d0:cf:26:cb:6a:b1:c3:b6:46:30:68:f9:38:18:9c:
ee:ad:ee:05:46:ab:58:91:da:1f:3f:94:b8:93:5d:
3d:4c:16:3f:28:5c:47:83:c8:af:b0:77:bb:d0:1a:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:BE:98:83:DD:CA:DF:2D:38:F7:9E:E7:B3:EA:D9:63:0F:21:B4
X509v3 Authority Key Identifier:
keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:ea:b8:62:85:40:48:fd:2c:f0:51:ce:3e:f8:c0:6a:22:
6e:77:3f:4d:68:b3:95:66:a2:42:5c:0e:8d:a7:66:dd:9d:1f:
63:8e:e2:71:c8:c9:90:2e:45:18:6a:3e:75:55:54:da:2a:6d:
ea:3a:af:e5:42:48:03:3a:78:dd:dd:68:fd:d2:01:70:a1:59:
cb:b2:46:77:a0:d8:ca:9a:1e:5a:ef:0a:c3:ed:4f:cf:74:7a:
0a:49:d1:67:5b:d2:39:cd:af:db:de:20:ed:a9:94:23:f6:ba:
e7:14:a3:26:b4:08:69:b5:ff:14:65:bc:49:55:26:f6:74:33:
4e:d9:a5:e9:ec:11:d4:f6:1b:ca:ad:80:35:44:5b:eb:ca:1b:
14:c8:8f:16:fc:8a:2f:39:41:65:70:f4:76:39:b8:57:a3:6e:
1d:24:e9:13:c2:c9:64:f7:ef:18:e0:9f:bf:0f:fb:01:cb:c2:
62:08:f7:36:23:68:2c:0f:a2:44:6e:50:aa:b0:b1:d8:f7:ad:
79:50:77:c9:c8:9d:9d:c6:6c:6a:83:c5:7a:42:00:42:00:d3:
cd:41:5a:f1:8d:06:f4:97:88:cf:87:12:9b:9f:69:1d:4f:70:
18:0f:47:9f:56:dc:4e:5c:f9:74:3f:d4:97:8c:ad:d2:3a:ae:
19:42:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:11 2025 by rpki-client