Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: 415eQSSH/V/Zdt9YL8V9+TO1HLOuqpx89yptfQ7WW9k=
Subject key identifier: 77:26:11:55:33:30:ED:8D:73:34:77:B5:5B:C3:E9:0D:66:8A:1C:52
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0197BB22262FB7CB9EBA5D7DA3F20EB9B488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0DAD
Signing time: Sun 29 Jun 2025 10:01:06 +0000
Manifest this update: Sun 29 Jun 2025 10:01:06 +0000
Manifest next update: Mon 30 Jun 2025 10:01:06 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: 6856N/KZT5fa5wGhuIbv3XVRaWuYrxTd2FPrGJ0SxNA=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:26:2f:b7:cb:9e:ba:5d:7d:a3:f2:0e:b9:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jun 29 10:01:06 2025 GMT
Not After : Jun 30 10:01:06 2025 GMT
Subject: CN=772611553330ed8d733477b55bc3e90d668a1c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:35:bc:6b:a0:56:0b:98:97:47:ee:57:34:
eb:ea:1a:ca:ca:7b:90:1f:0a:39:81:ff:46:a2:2d:
0b:31:f9:af:ee:15:f0:8a:b9:c5:16:ce:2d:eb:61:
0d:26:bd:66:57:08:ce:14:44:8e:3a:9f:ca:29:bb:
3c:e1:2f:32:c3:7e:e7:a5:41:a6:4f:7c:5d:be:e3:
19:d9:b1:8b:17:b4:d1:0b:75:0c:41:78:b1:db:ae:
4b:2e:a4:24:13:f6:5a:00:cd:77:29:b9:4f:03:0c:
57:ad:4a:40:63:16:05:6b:7f:cc:7a:63:14:e3:04:
f7:32:fd:1f:42:4c:b0:9c:dc:3f:e7:31:c5:f4:6d:
b3:ae:40:87:ee:00:5c:2e:a6:60:49:e6:f3:3a:46:
2b:85:8c:fc:a2:84:8d:8c:2d:e0:82:65:8e:61:9e:
fb:85:fb:41:4c:5f:33:ca:71:f0:74:b6:01:3d:5c:
4c:90:18:84:cf:25:4d:ac:85:98:81:dd:c7:b2:29:
29:f9:e0:4e:2a:c0:cc:33:d7:d5:36:92:e5:9d:03:
26:53:ab:88:f9:99:cd:0c:64:7f:74:52:76:b5:c0:
a1:f6:22:dd:91:a3:1b:dc:a6:fe:4f:2c:81:a5:c7:
b2:92:b8:38:f3:4f:1b:0a:40:04:6d:68:14:08:44:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:11:55:33:30:ED:8D:73:34:77:B5:5B:C3:E9:0D:66:8A:1C:52
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:05:9e:e4:2f:77:34:f0:c6:68:44:f0:72:b9:4d:04:5b:
3d:08:38:29:5f:0c:54:c1:a1:50:28:92:4b:1b:99:f2:7b:35:
73:21:d9:44:29:cc:51:b3:35:d9:61:63:27:0d:b0:85:dd:ea:
36:d5:a6:95:b2:3c:3e:9d:a9:a1:61:a7:2b:d5:f5:2a:e2:08:
3d:e1:86:f4:54:70:18:65:bd:05:f5:c9:ba:fa:d7:78:d7:b1:
1e:92:f6:26:a3:78:01:02:fb:18:bd:04:78:cc:7b:e3:bb:60:
27:fc:c7:37:13:b8:ab:0d:ca:f8:bf:ef:e2:55:26:80:2e:4c:
a3:1a:45:13:8c:da:58:ca:9a:a4:c3:e8:17:44:28:82:6d:2c:
6b:0b:b2:e9:43:5a:e9:27:9e:e8:cc:43:31:ab:37:18:a8:3d:
61:a4:c0:e2:f8:b6:12:80:b9:76:ad:f6:b8:b2:81:86:c2:ce:
4c:ae:a6:9d:17:d4:82:96:da:fb:ec:41:d6:6c:e4:c4:09:b7:
32:f4:6d:3b:6e:dd:92:86:cd:48:a8:db:e4:70:94:b5:4a:4b:
c3:68:5a:76:79:21:61:da:06:35:bd:39:20:ec:da:ce:f6:9c:
d3:4f:6f:9c:41:ef:5a:d7:d4:1b:fa:e9:28:54:64:f1:04:17:
98:5e:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:16 2025 by rpki-client