Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: ZDff+K+N7cBhNv58cl9OJWrNkGdLIX/x06WKInUaJqE=
Subject key identifier: 27:3A:23:E6:A4:38:71:F9:35:02:0E:80:E0:BA:9F:27:65:C5:0C:43
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 0197B74557D31D67B61CCBBF690CCD1C8713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0923
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: vxOubGVS6bumcFGjZU1/26z1IT7xKUvv9pXaxU4aa/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:57:d3:1d:67:b6:1c:cb:bf:69:0c:cd:1c:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=273a23e6a43871f935020e80e0ba9f2765c50c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:6e:80:d2:dc:14:34:1f:60:36:e9:6b:5a:
3e:8f:81:40:a5:d8:a4:73:2b:1a:04:e3:ea:5f:8d:
3e:c8:4e:7a:bc:e7:91:21:c3:c7:b1:a5:ab:14:57:
10:19:b1:ab:db:a5:08:ab:9d:b2:8b:bd:93:27:1e:
d6:eb:f7:33:2c:94:43:a7:15:e0:b0:94:c7:0e:ae:
12:f2:58:e1:7f:f7:c7:9c:b5:16:df:04:9d:65:23:
44:86:ab:17:fa:29:5c:0c:d1:9a:15:b5:18:b1:8e:
6c:bd:05:3c:62:99:68:eb:00:dc:ce:e1:5c:88:bb:
e1:b2:df:de:1c:81:c1:af:b8:35:ba:51:47:fd:b1:
87:42:b2:9b:ae:1d:72:d6:27:b8:38:f7:05:dc:fb:
0e:01:1f:0a:eb:3d:86:ab:43:52:7e:57:a4:ca:66:
fe:35:f5:02:0a:56:06:20:bd:e9:8d:92:ec:df:7e:
18:9c:d9:21:5e:24:c3:a2:f9:b9:3b:9a:19:de:da:
1b:64:f9:2b:0c:42:48:77:76:39:0c:a3:1b:a1:a8:
7a:2c:3f:80:a3:a9:9b:e7:f3:48:20:af:2f:11:ba:
5d:18:16:94:22:44:56:56:4e:4d:89:8f:d9:6b:c7:
e0:a2:b4:db:6c:31:0d:a5:2a:41:8c:08:22:a1:dc:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:23:E6:A4:38:71:F9:35:02:0E:80:E0:BA:9F:27:65:C5:0C:43
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:12:be:0a:71:99:6e:50:3c:d0:1d:c5:12:8b:31:c6:4d:
6c:ef:d2:36:77:b0:07:7b:30:84:fc:19:4f:91:61:bb:3d:bd:
86:f1:e1:39:48:6c:be:d0:6e:dd:93:e1:12:7c:2a:1d:2b:88:
6c:1b:c1:3a:6e:4c:78:fb:ff:f1:0c:2f:3d:1a:2c:92:8c:d0:
6b:d9:85:e4:7b:23:93:aa:e4:69:ea:a5:69:ae:5c:aa:91:3e:
04:be:90:74:72:0f:46:4a:a9:95:2d:5b:02:10:97:96:2c:3f:
23:7f:95:7f:72:41:ff:4f:15:49:c8:ae:8f:a8:45:48:25:f0:
2a:f0:1e:b8:ed:88:08:c3:8e:3c:74:8e:aa:8f:78:e8:26:eb:
66:29:a4:42:52:fb:5d:cf:64:24:31:9d:65:67:50:77:9e:0e:
e8:70:00:d6:03:ed:a1:a3:c0:36:10:60:be:8a:c3:f6:d0:bb:
d3:ce:08:08:13:8d:1e:6b:04:53:0e:b5:7f:21:0b:9b:2d:df:
34:2b:1a:3c:5c:19:23:f4:99:90:a1:cf:d5:4c:d3:a9:7f:5d:
78:6e:e3:e6:3a:19:57:a5:7b:bc:01:b5:5f:0d:5f:c0:9e:9a:
8a:7b:70:f3:7a:22:eb:76:07:5b:7d:d3:90:37:d8:4f:c9:08:
c2:ac:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client