Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier: xY5M4xneFd1bTzcjQYJ+ii2oKCxJ/Dwg9G8bEycf5Nk=
Subject key identifier: EF:CB:64:8B:4B:41:AE:3E:52:65:E6:6F:B8:D2:40:50:3F:14:CE:F6
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 0197C5381B488F16CEBD60F4E265401F7F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number: 14E4
Signing time: Tue 01 Jul 2025 09:01:17 +0000
Manifest this update: Tue 01 Jul 2025 09:01:17 +0000
Manifest next update: Wed 02 Jul 2025 09:01:17 +0000
Files and hashes: 1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: m1BM1t4kPxTDlsUJEraVl3X+MLPfqhhBI7FKr4xYg2s=)
2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:1b:48:8f:16:ce:bd:60:f4:e2:65:40:1f:7f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Jul 1 09:01:17 2025 GMT
Not After : Jul 2 09:01:17 2025 GMT
Subject: CN=efcb648b4b41ae3e5265e66fb8d240503f14cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:43:0d:b5:b2:9b:af:89:8c:6f:8e:b0:8b:b8:
3f:80:29:f8:be:33:0b:54:a3:32:6b:ef:4f:11:5c:
26:04:59:dd:72:54:7d:f0:80:68:f2:03:60:99:39:
91:67:4e:d2:71:21:38:58:7e:eb:cb:52:61:74:9b:
dd:cf:b4:23:80:51:bf:ea:61:d0:a1:0b:e9:7d:82:
75:81:ca:11:2d:66:e8:f5:73:e0:e0:5d:4d:c2:13:
dd:cc:58:3e:22:0d:ad:98:35:ca:91:39:32:f8:2c:
31:c3:55:62:86:11:f0:1c:e0:29:18:ea:8b:14:e1:
cf:80:0b:e9:ed:48:7b:f7:ea:7d:24:11:e7:3a:68:
25:de:6d:14:c1:ba:ee:7d:11:f5:3b:5d:ab:42:c9:
4f:e4:cf:98:f4:d9:08:e6:c1:d7:db:22:3d:29:2a:
16:70:5f:c7:20:69:d7:6c:fc:de:e8:ea:13:83:3f:
af:cd:1d:eb:0f:39:54:98:ff:34:70:b6:79:86:87:
b5:d3:07:45:ca:05:5e:5d:bd:af:c1:90:ff:f6:18:
95:70:c2:cc:bf:50:cc:b2:2c:f9:f3:6b:1d:98:6a:
5b:ca:78:59:77:2e:ca:29:c3:f6:46:bf:8d:8a:14:
00:ed:82:3c:6f:5d:92:fc:6b:9b:af:9f:78:94:8d:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:64:8B:4B:41:AE:3E:52:65:E6:6F:B8:D2:40:50:3F:14:CE:F6
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:0c:4c:1a:2d:4a:d8:d7:e5:e5:39:68:94:7b:d9:5a:32:
b9:99:9d:d0:11:dc:90:cf:29:9f:90:14:7e:de:db:64:7b:47:
2d:04:11:eb:f3:b1:24:c3:37:b6:e7:0a:65:ac:8d:87:43:fe:
88:a6:63:07:6e:a7:c1:20:f0:84:b5:dd:5e:fc:fa:9d:c4:02:
6d:f1:28:0c:e8:ab:46:36:79:1b:b9:8f:86:a9:25:4a:08:10:
27:4c:f8:a3:e3:5b:19:2d:f1:ad:59:5a:80:ce:76:1f:a4:9c:
ca:bf:2c:fe:bb:2b:ae:c0:f1:8f:3d:cc:d6:ab:5e:59:49:73:
6c:e1:1f:94:be:39:7a:4b:41:5b:ed:d1:cd:8a:e3:7c:11:f4:
f4:86:7a:cf:52:f1:c8:50:94:f4:9a:57:59:cd:71:34:b5:a3:
9c:ec:ef:7b:f9:20:0b:c6:97:06:02:21:bb:e0:56:cc:65:90:
c6:7a:7f:45:b1:88:c4:7c:80:7c:fd:c1:4b:f5:96:0b:2f:79:
f6:2a:73:34:18:2a:d1:2c:4c:7a:d0:29:a6:03:01:af:71:83:
63:82:a1:a5:17:98:08:8f:ee:ea:8a:2a:5b:cb:4e:96:f2:1c:
34:f3:70:57:9d:6d:47:7b:a3:02:c8:af:4e:e4:61:d5:66:8f:
29:fa:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:10:27 2025 by rpki-client