Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: mJ3PKPej2sroJKICMFx+NeTl1w/HE8yWXZ8E6m11MSY=
Subject key identifier: E4:61:83:AE:F2:47:58:52:44:5C:D4:90:C1:78:2A:2D:5E:60:29:A4
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 0197BBFDA106875682B99E17BE5BCE3B2472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0E0D
Signing time: Sun 29 Jun 2025 14:00:50 +0000
Manifest this update: Sun 29 Jun 2025 14:00:50 +0000
Manifest next update: Mon 30 Jun 2025 14:00:50 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: CmsFvIc0e/5Tmtwp7QKLl2+rUg93gnGZANduax3SK5g=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:a1:06:87:56:82:b9:9e:17:be:5b:ce:3b:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Jun 29 14:00:50 2025 GMT
Not After : Jun 30 14:00:50 2025 GMT
Subject: CN=e46183aef2475852445cd490c1782a2d5e6029a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:b1:e1:dc:aa:67:08:1b:37:8d:0b:d0:9c:
4b:71:d7:6a:de:29:c9:df:12:81:e8:e1:c5:e4:78:
b9:b5:a6:4c:cc:dd:e8:41:37:8f:21:33:18:af:49:
41:a2:d2:c5:bb:62:3d:ac:18:5d:ee:65:bd:ec:0e:
d0:00:b9:42:89:40:2c:6e:4e:9c:6e:46:99:5e:64:
38:55:1f:a5:d1:b8:9a:96:59:b3:d9:e5:ad:26:7c:
83:40:01:51:a5:de:62:d5:63:e2:e6:95:47:49:46:
b8:dc:5e:6a:af:ed:23:fb:fd:4d:e5:0f:42:6a:d5:
00:10:f3:e1:35:8d:8f:10:35:d7:47:a8:6f:31:d8:
ab:b9:27:45:1c:59:63:dc:9a:f0:f5:af:62:6a:d4:
da:6b:1a:88:2f:dd:22:75:1e:a1:0f:8b:32:07:a9:
36:e0:48:b3:5d:60:9e:ad:04:b7:ed:24:c9:e3:64:
f4:12:5f:97:5f:50:ab:a0:24:90:94:54:f7:b6:75:
68:ac:1a:3b:c7:2f:82:a4:43:35:ba:00:95:ca:46:
36:db:c3:19:6d:8a:db:3b:a2:c2:70:49:51:bf:0a:
da:52:eb:cd:2b:b6:bf:8d:a0:20:58:df:40:f4:80:
72:7d:b2:83:6f:ba:36:37:ec:92:a9:d2:9b:86:79:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:83:AE:F2:47:58:52:44:5C:D4:90:C1:78:2A:2D:5E:60:29:A4
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:7f:b3:f1:ad:8b:4f:c7:87:fb:18:c8:e5:69:3a:da:ce:
39:6b:72:68:ce:8c:60:a6:72:1e:d8:ea:90:a2:55:c4:6a:43:
ed:29:27:c0:fb:d7:e7:8e:59:ef:db:9d:a7:23:ed:d4:8f:dc:
fe:81:f0:de:05:a8:0e:cc:47:59:71:fe:ef:80:2f:f5:03:cc:
06:ae:a0:b3:95:1c:28:a7:9c:02:5f:f4:3c:94:56:10:91:e7:
00:99:c8:13:1d:bd:b9:f7:e6:40:ed:92:59:b9:6a:b4:83:74:
bd:a8:67:42:21:17:b2:53:65:bc:16:de:92:69:58:6b:ac:1f:
c1:f2:3c:1e:61:15:27:00:47:29:8e:30:c3:05:11:85:e4:0e:
74:9d:b7:d4:e3:99:66:02:e3:a2:aa:00:a3:4c:18:b4:a3:e1:
4c:6c:d7:65:91:25:7c:16:d9:8e:20:a3:3a:a7:3f:7f:69:7e:
a3:bf:5f:41:12:0c:0e:10:de:83:a1:76:46:25:62:7e:9c:9d:
67:b0:bf:1c:b3:f9:a9:98:86:87:bf:a9:db:0e:1d:d5:53:06:
30:b7:ab:ff:82:c3:a0:96:3b:58:04:eb:d7:df:ae:04:fc:64:
92:79:3f:b3:94:4f:dd:c1:ce:6c:60:ed:35:e4:49:68:ff:5a:
b5:8a:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:20 2025 by rpki-client