Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: p0IN/fq+PZbxWcg1nbzbldAFajZGgtEzGbU8geWKMN0=
Subject key identifier: 51:A5:35:0C:72:E8:A6:66:39:87:53:7F:77:AB:CB:CD:FD:EF:2C:CB
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0197C493675087A221DC889F075A07297922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 0613
Signing time: Tue 01 Jul 2025 06:01:23 +0000
Manifest this update: Tue 01 Jul 2025 06:01:23 +0000
Manifest next update: Wed 02 Jul 2025 06:01:23 +0000
Files and hashes: 1: 2etQgypEbAtXePjS8z8cfKj7aJ0.roa (hash: 7GXw+lqNccCeSIvWKD3qILpJweH0CVGSlBQfGkrhr6k=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: I/QBGTzjn6s158bEjA93E+22W4vj9Lcy+vWUZt9cM/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:67:50:87:a2:21:dc:88:9f:07:5a:07:29:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Jul 1 06:01:23 2025 GMT
Not After : Jul 2 06:01:23 2025 GMT
Subject: CN=51a5350c72e8a6663987537f77abcbcdfdef2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:5f:96:b2:d0:c6:06:ea:89:9c:95:a6:a9:
4b:eb:bd:3d:46:44:5b:c4:3b:1d:83:59:db:4b:a1:
3c:81:e8:e8:3d:f5:2b:89:1d:08:23:9b:8e:e1:08:
20:f7:81:ef:00:d9:5c:53:da:0a:7d:be:b7:b5:17:
b2:62:bd:81:72:a8:0c:c1:50:78:ac:9b:17:41:96:
c8:b0:60:bd:68:66:85:57:ac:93:ad:6f:dd:77:c2:
b4:c6:f5:f9:01:44:3b:56:86:2b:61:6b:45:88:2b:
48:ac:5a:78:f7:ea:0a:ef:f7:1d:03:f8:7c:3a:d6:
e0:7a:b3:0e:d2:4a:ae:c9:e3:43:99:32:24:d6:70:
d6:a3:9b:9f:18:dc:41:aa:14:2e:32:ee:c0:ce:8f:
59:36:26:35:ce:f4:e0:92:9d:03:cb:8c:00:11:b3:
11:5a:ba:40:1c:79:8c:1d:55:67:07:62:01:c8:62:
4c:5d:13:7b:5a:0e:08:1b:fc:91:a0:f6:5d:36:94:
7a:26:00:5e:0a:cf:08:e6:d5:23:4c:c4:82:8d:2f:
5f:e0:2d:a6:ad:6d:4a:bf:87:17:bb:c4:8e:ac:bb:
55:f8:f6:2a:6f:a6:7e:5e:63:66:0a:9b:78:fe:51:
6a:57:6c:3b:05:71:2c:09:4a:4f:5b:14:83:bd:74:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:35:0C:72:E8:A6:66:39:87:53:7F:77:AB:CB:CD:FD:EF:2C:CB
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:0d:2d:67:39:d6:3d:97:12:f4:60:ab:0c:e7:d2:83:f6:
b1:fd:d7:f2:4f:d2:b3:ce:0b:4e:6b:38:43:5e:cc:bd:49:0d:
f9:ed:82:a6:6a:db:10:25:83:39:c1:e7:87:d1:53:1e:fc:31:
e3:64:b8:f9:06:1b:b5:71:3b:5e:d4:08:82:dc:c0:b9:26:3e:
b7:16:63:7c:77:91:6d:90:5a:87:97:bc:3d:86:b1:6c:cf:20:
b9:e7:ec:d9:35:2c:60:dc:b3:00:a6:28:39:90:b8:c0:fe:51:
b4:db:27:31:81:fa:7c:91:4a:33:d6:bf:05:3f:56:79:2c:4b:
fa:6a:a9:11:bb:dc:77:72:7a:7d:0c:92:ce:9d:14:69:04:d4:
94:56:af:33:ea:9f:44:db:38:ee:89:6d:1a:96:3c:42:53:3d:
85:ea:fa:c5:55:cb:03:6b:ef:ad:4d:d2:2d:3a:bc:9f:50:6f:
7f:e8:9d:5c:57:e4:86:0a:4d:6f:38:54:45:fa:9b:a2:cd:8e:
f9:3d:36:dc:cb:44:5b:ad:2a:01:72:f0:62:5c:4e:66:b7:2a:
81:f0:91:a2:ba:62:8c:6f:8a:c4:b2:9b:0d:47:96:90:87:7e:
85:91:f8:55:c6:96:43:23:c2:b0:6c:35:dd:35:b9:94:1a:48:
60:cd:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:29 2025 by rpki-client