Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: efBLwt6iATPJtIOLOpJNBI0X4uL4q9SCEWhduSXcR5A=
Subject key identifier: 83:0B:9B:09:17:30:8A:ED:DF:75:49:7A:9E:8A:D4:5F:69:CB:34:4D
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0197B70E9BC2A21B037367C2CF9C29976A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 1170
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: 0o6S8hN7OirLfqf/AZHguCzKyuq2JvIfM+9w8EraNUs=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:c2:a2:1b:03:73:67:c2:cf:9c:29:97:6a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=830b9b0917308aeddf75497a9e8ad45f69cb344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:34:15:7a:a9:04:7c:16:85:9a:42:13:3c:
65:6b:49:77:90:2f:a1:86:1e:a8:38:7e:c5:2a:c3:
56:67:9c:69:5c:1e:d6:21:ff:7a:7f:0e:f7:6e:e6:
43:1d:bc:54:9d:e1:34:d7:16:7e:f7:a8:34:13:c4:
18:c6:6e:e4:ae:cf:73:eb:43:80:16:ac:c5:9c:c9:
21:f3:3d:3a:68:c3:46:fb:b5:6e:8d:75:4f:ba:8e:
75:94:7d:e0:43:0f:9b:ee:03:cb:fa:6b:66:5e:ca:
e0:13:0a:fd:72:2d:94:c7:33:a4:e4:df:33:d4:15:
df:73:e5:5e:dd:3f:87:f9:fd:db:6b:86:9e:d0:6a:
38:21:be:1f:72:5a:39:a2:61:e7:6a:35:69:31:77:
6a:da:c9:c3:c9:64:ec:be:c9:52:fa:7a:0c:ee:ea:
e6:fd:b4:ba:7e:64:8f:94:c5:96:87:0f:07:3d:6b:
b9:e4:e8:b8:ac:bd:d1:b9:82:15:09:8a:f2:c6:a5:
15:3b:9f:18:82:05:09:b2:a7:22:73:a2:4f:12:73:
b8:8c:0d:e5:77:4f:4f:9a:af:80:c9:f4:7a:a1:1f:
92:2d:30:b5:05:57:aa:d7:fe:7f:74:60:ee:e2:f7:
7e:85:90:80:b4:f0:c2:9a:76:d4:2d:68:0f:8f:a4:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:9B:09:17:30:8A:ED:DF:75:49:7A:9E:8A:D4:5F:69:CB:34:4D
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:6d:59:aa:35:be:8a:84:ce:47:d2:25:e1:ee:85:80:7b:
67:f9:8f:a1:86:ae:d5:1b:e1:cd:75:3f:56:21:39:38:68:5c:
59:1c:5b:48:72:1a:88:67:c0:e9:57:90:df:8e:c5:5e:72:d0:
e7:fb:e8:0a:73:e5:b9:1b:7e:6d:1a:2d:aa:52:74:36:4f:9f:
b2:b2:be:8e:4c:52:c2:24:1e:e2:62:32:33:ab:e2:f3:2f:b9:
55:33:6a:db:ab:28:0b:a0:d6:a1:f1:9a:b0:d2:5a:1a:66:de:
49:57:32:55:3e:7c:82:05:09:78:0c:e4:3d:1b:a6:df:c0:8c:
6d:00:fb:74:cd:59:17:e0:f5:6d:17:84:62:db:46:29:0c:2b:
af:d3:b4:24:90:e8:0b:a9:c3:1d:06:ee:a6:fa:64:43:49:c5:
f5:56:83:89:85:80:9e:49:7c:d4:3d:17:e3:29:16:de:8c:f1:
b5:68:97:c4:4c:a6:a1:5b:b8:74:5e:56:52:00:73:cd:0d:1d:
12:d3:50:5b:20:57:18:64:5a:b1:ed:76:d2:a3:8a:a3:cb:28:
a3:31:b0:a0:31:be:b8:70:a9:ed:9d:36:e0:12:e2:8e:2e:ea:
c5:b0:52:af:76:08:60:45:16:f8:53:bb:24:a5:1f:f4:5c:a7:
62:f1:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:37 2025 by rpki-client