Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: fMLMAjs8Kb7aaoaYKJ4Aq8VwQCTdIhV7iuFxpqqvG8U=
Subject key identifier: 0A:15:F7:B9:4D:56:45:8F:AA:6F:05:B2:60:96:99:48:1E:24:F4:37
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 0197B6A2345EB37F6E98544C225EBAD296D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: TUjqP7awmnHcnYX8rXANiLP4EOpjDNuv91fGuFj2aRo=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:34:5e:b3:7f:6e:98:54:4c:22:5e:ba:d2:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=0a15f7b94d56458faa6f05b2609699481e24f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:16:9a:1d:42:84:bf:a2:64:6f:2c:d3:c6:
d4:4e:72:27:b7:32:9c:c4:88:df:52:38:49:0b:0a:
e1:76:ff:e0:5f:18:9d:ee:e5:d4:f2:fd:ac:f1:99:
10:9a:c6:7c:25:fa:30:56:6e:f5:c3:87:83:23:8e:
e9:32:4e:c7:84:6c:02:4f:c2:56:7d:44:07:98:cf:
66:45:94:da:b8:59:6f:e8:9f:29:c5:11:5c:6b:0f:
97:8c:85:7c:64:f1:b2:1c:d1:73:86:6e:7b:8e:db:
e6:e9:33:a3:84:f3:e4:ed:1c:97:36:2f:10:87:e7:
81:c1:2f:88:b3:57:f2:d9:a1:3b:24:ba:81:d1:e9:
45:64:0d:29:83:36:4d:a9:9d:cc:4f:c9:93:bb:b4:
7a:b6:42:b1:e8:e6:3b:3c:6a:fe:93:54:23:6f:33:
d9:aa:8d:a8:34:ea:fb:bb:ab:3f:1f:64:64:5e:aa:
8d:06:72:aa:09:e5:28:c3:9d:ed:10:58:d3:f0:09:
d9:1e:8d:b4:80:46:25:29:4f:f7:e3:cc:a1:fe:9c:
4f:13:49:f1:76:b0:58:7d:03:a3:94:04:40:aa:53:
67:31:8e:ac:87:89:91:f3:14:bf:c4:f0:7f:6d:1f:
5e:b2:02:e2:28:8f:ac:6a:93:0e:2c:f9:05:07:60:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:F7:B9:4D:56:45:8F:AA:6F:05:B2:60:96:99:48:1E:24:F4:37
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:2e:02:68:cb:05:9a:59:64:26:92:36:55:fe:a8:56:e1:
a5:2f:23:b3:3c:6c:0a:a8:e2:dd:5d:dc:59:9c:6e:cb:a1:f0:
31:65:82:7e:00:09:6c:d0:ca:2a:b4:3d:6a:c6:be:a5:a1:1a:
b2:33:98:34:b4:a7:6a:ec:c4:e1:38:56:85:9b:80:7a:c4:57:
2d:30:12:0c:03:5c:a3:97:01:63:06:44:3e:ba:f1:cc:a4:80:
11:c0:48:06:9c:02:46:28:bb:e5:25:fc:72:72:f7:69:9b:b4:
29:2b:92:d6:c4:16:b3:28:9e:6a:55:e8:b6:95:c7:7a:a0:87:
5b:28:dd:ce:1b:bc:d9:a0:4f:3c:01:17:77:34:93:47:0e:17:
81:e3:6d:bc:10:0f:cd:7b:5d:8c:a2:ab:bf:b3:66:eb:0e:31:
cd:04:57:b3:0c:aa:5d:0b:cd:bd:1a:30:2d:d3:14:19:98:eb:
69:fb:be:0e:7b:1f:88:21:d1:f8:39:72:f1:02:61:e5:80:3a:
86:13:94:f9:67:cc:22:10:01:c2:d8:2a:d9:a6:ef:34:23:cc:
35:9f:79:fb:5d:12:f1:f5:1b:03:b1:1c:f9:47:2e:1d:25:50:
37:fa:b1:b5:ce:41:1a:d6:26:76:c9:d5:53:57:3e:74:c9:c8:
51:c4:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:21 2025 by rpki-client