Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: FFQPbau54tA/TFf7rF8WyaIQpuCjrDGO4O1nMuohVjc=
Subject key identifier: D7:42:40:02:D1:B5:C4:B9:45:12:77:17:14:B0:83:E8:3A:B7:CD:09
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0197BA7D8865488B3C590D0D52C8A146F99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 07:01:18 +0000
Manifest this update: Sun 29 Jun 2025 07:01:18 +0000
Manifest next update: Mon 30 Jun 2025 07:01:18 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: 9RmM/DbJd7TUINxpVreRQnhUET/Os0ID8uczy+eiL8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:88:65:48:8b:3c:59:0d:0d:52:c8:a1:46:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jun 29 07:01:18 2025 GMT
Not After : Jun 30 07:01:18 2025 GMT
Subject: CN=d7424002d1b5c4b94512771714b083e83ab7cd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:e4:11:78:1a:73:3c:be:c8:30:7b:ab:00:
cd:2e:9a:ca:39:89:26:55:ab:21:6a:1f:92:21:a8:
2e:71:14:ed:ad:7c:de:fc:b5:01:79:5e:b0:ad:df:
33:fc:ec:e1:de:ae:ad:2c:0a:3e:d7:21:d0:bb:db:
65:e2:a0:a2:45:2e:74:96:0f:20:5b:7e:90:f8:c8:
ab:b1:8d:39:2d:44:73:2c:ea:14:12:3a:9a:8c:ba:
92:43:f3:ac:0f:4d:d1:a7:60:5a:f0:1d:3e:2e:14:
10:78:9a:2f:d1:52:cc:77:e7:3e:da:90:9a:84:9a:
32:3e:53:a0:3a:42:53:e5:ce:0f:cc:25:10:8e:62:
67:3c:a0:bf:80:c0:89:d7:61:fd:31:76:b0:78:18:
e0:a8:e2:1f:c7:fc:52:b2:ee:ba:14:07:78:8e:3a:
1f:4c:79:a1:db:f6:07:05:6c:1f:4f:06:7d:2a:44:
c9:58:3c:84:2d:cf:64:19:b4:50:8b:c3:24:86:b7:
d6:cc:42:77:6f:c5:3f:96:c3:db:26:b2:6c:61:e1:
fa:1f:fe:e4:65:1b:4a:cd:50:71:e0:7b:d0:d4:9c:
e0:92:38:95:ae:fe:f5:6e:c6:2f:32:90:be:cd:1f:
27:bd:4e:c6:92:85:10:9b:a8:76:ac:12:7b:11:3a:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:40:02:D1:B5:C4:B9:45:12:77:17:14:B0:83:E8:3A:B7:CD:09
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:02:57:42:05:e6:7e:67:4c:ae:38:fb:ab:7c:35:53:01:
06:4e:62:d1:40:86:26:de:d0:49:35:01:e7:09:38:b2:de:72:
26:46:64:d3:39:e5:0d:6a:f5:3c:4a:8f:dc:92:ad:d4:72:72:
de:5d:79:b2:45:ca:e7:06:25:14:20:4a:99:73:36:7a:57:ec:
90:66:d2:a6:16:04:e6:ac:37:04:af:ae:f2:30:19:c3:69:e6:
a1:40:28:75:fd:b5:24:c0:a7:e6:e7:8f:9b:c4:2a:7f:0e:1b:
3b:7e:2f:a2:c9:cc:18:3e:63:5d:a8:a1:b7:6b:8b:1c:a3:b7:
aa:b3:af:ac:cf:10:13:c5:9d:b4:05:00:f8:04:1c:44:2e:60:
34:27:ad:c1:b9:db:49:c3:40:57:77:20:48:7b:29:35:18:2b:
f3:5a:73:3a:65:9f:93:72:c0:e5:6d:03:9f:bd:d0:eb:23:c8:
e3:65:f2:48:5d:b2:84:bc:27:99:0b:6f:21:d8:b7:8e:e6:ab:
4d:d8:79:d6:00:9b:3f:3f:ab:56:a9:e9:d1:a1:21:b1:64:68:
01:28:60:5a:fa:fd:f8:5e:8f:c2:69:c5:2d:e9:65:03:9e:2d:
79:6f:f8:c2:98:9c:a4:71:05:03:f3:57:03:aa:a0:f1:a0:55:
0b:12:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:59 2025 by rpki-client