Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: bjnY6StS+AQQatVGdxzTPooK9TubweLLT0RFZc+VwTo=
Subject key identifier: 0C:5A:0C:3F:DD:42:F4:C3:DD:99:02:84:82:5E:DD:9C:40:6A:73:D0
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0197BF359C2CE905FB32362078D2AB155D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 154B
Signing time: Mon 30 Jun 2025 05:00:51 +0000
Manifest this update: Mon 30 Jun 2025 05:00:51 +0000
Manifest next update: Tue 01 Jul 2025 05:00:51 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: Lp40MTXd13BsEkMoR0/anfNUanPQ2TLvgCjkaqh/LY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:35:9c:2c:e9:05:fb:32:36:20:78:d2:ab:15:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jun 30 05:00:51 2025 GMT
Not After : Jul 1 05:00:51 2025 GMT
Subject: CN=0c5a0c3fdd42f4c3dd990284825edd9c406a73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:8b:9e:e4:9d:ff:e3:d8:2f:8e:5f:6d:46:
95:9b:a8:b5:b2:09:5c:2a:87:4a:77:b0:58:6d:c8:
da:c6:f4:56:b2:20:17:a7:5a:68:4e:bd:75:34:35:
9d:a6:9c:09:18:af:91:f3:b8:c9:7f:76:d8:65:52:
43:47:54:7f:90:65:6e:2a:47:ec:73:4d:d7:60:6a:
59:c7:0e:75:dc:ed:71:97:51:ac:65:46:99:11:52:
c9:b7:b9:c2:54:8e:1d:80:8b:95:7a:0e:0f:f8:74:
95:46:55:61:14:87:54:80:8b:3a:14:a7:c5:79:c2:
90:b6:c3:07:74:1e:a9:50:ce:3e:90:41:a3:7b:0c:
a4:01:82:02:d3:b5:ee:01:9f:14:79:49:98:c4:1e:
4a:05:bc:d9:b1:19:f9:73:8a:b0:6c:b0:3e:6d:aa:
7e:6b:3a:56:a9:a2:4b:83:91:ae:3f:2b:da:6d:6e:
cf:81:fe:8a:c5:58:fe:5a:9b:6b:f1:5f:88:e5:1e:
ec:65:8b:17:5a:c8:b1:c1:27:09:e8:78:77:57:eb:
62:12:20:f5:79:e9:7d:bb:ac:d4:64:15:d2:b0:dd:
af:97:57:9e:60:f5:0a:62:b8:1c:6f:76:df:73:f9:
e0:89:68:44:c9:96:dd:c2:45:bb:8a:29:50:ca:c5:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:0C:3F:DD:42:F4:C3:DD:99:02:84:82:5E:DD:9C:40:6A:73:D0
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:73:b5:4d:00:c2:74:e2:cc:89:ea:8f:fb:ae:74:a1:aa:
f7:89:2b:1d:6f:fb:ba:b4:97:18:8b:d0:37:f7:b8:55:18:1b:
4a:10:d5:c5:40:e1:cb:e0:d5:21:ba:2c:0c:e8:0b:8d:bc:e2:
72:e6:8a:5f:68:a3:c9:dd:e2:71:5c:b2:92:63:b9:c2:2c:99:
a4:d7:b3:d8:ff:6f:d1:22:2a:a1:95:19:5b:ea:da:ed:b0:a1:
62:ad:64:f3:bb:98:59:5d:51:5c:8d:5d:19:b1:42:6f:ed:47:
c4:ee:4f:b6:17:af:be:87:09:bb:b4:db:dd:61:39:1c:05:c7:
a4:ad:2a:20:92:52:bd:f2:01:a1:b1:3f:3b:0e:b0:16:6f:a6:
76:49:18:2b:92:aa:c7:ec:5e:52:88:bd:ea:e2:61:5e:bc:05:
63:3b:34:1a:c5:9c:77:fa:16:01:8b:a4:86:4a:f2:b8:fb:d1:
bd:30:b0:78:f2:00:ee:e5:4b:03:f3:9b:72:e0:80:8e:d3:75:
aa:ec:1e:bf:65:83:b8:68:f1:b4:bd:b3:86:fb:12:50:c8:4b:
fc:25:ee:48:e7:3e:b8:03:1d:f2:8a:a0:f7:f2:09:3c:12:1e:
d5:50:da:9e:cb:1a:23:1c:29:db:09:8c:e9:39:65:04:dd:39:
ff:1e:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:58:48 2025 by rpki-client