Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: vAN7+IJCRDBjJ9+2LlvEIFC41GQ24f/oD6NBUj7dkOI=
Subject key identifier: F6:36:6D:35:39:0E:39:97:FC:F7:2E:9F:94:42:ED:83:63:B6:6C:1A
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 0197B77C073DA96AFDD31A1E0CE523E29318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 147C
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: Sy9MkTO2BPRvKPMpsGDN-2TnmTk.roa (hash: Zvh1o0q4voreyVSKOLfHlxnIapN8G7OyPz3tE/wp4Tg=)
2: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: pu927taF44jbdZKrqoqL/2JXmf4yv2lIV2Cl0OdG7LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:07:3d:a9:6a:fd:d3:1a:1e:0c:e5:23:e2:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=f6366d35390e3997fcf72e9f9442ed8363b66c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:74:77:3a:02:a5:ef:5e:90:5f:8c:21:ba:
9d:c9:91:b7:09:d6:fd:af:03:09:49:6c:54:0c:34:
b5:83:d5:7c:bb:dc:f9:f3:05:20:13:ce:f2:ac:d8:
63:32:59:c0:4c:96:d0:32:65:1c:d6:32:fa:4f:7f:
90:09:5e:75:a5:4e:af:cd:f4:8a:d7:3c:1e:47:68:
55:9a:44:54:d5:f4:4a:a3:b0:fe:b5:4b:37:86:31:
db:cc:dd:84:bc:69:a5:c4:8c:2d:3a:f7:9f:37:b5:
a4:91:a2:ba:ed:1e:45:0d:05:01:b4:2f:0d:19:d4:
16:af:d4:fd:e8:2a:28:d3:dc:1d:48:27:e3:ea:b0:
c7:13:92:92:e6:80:35:ef:70:e4:3e:3e:10:e8:3e:
be:a8:93:9b:81:6a:fb:72:45:3b:77:6c:83:b5:6b:
c1:8f:da:b1:56:92:6f:50:65:97:21:2c:db:e8:1d:
5d:17:7d:e8:fb:d7:d1:b0:43:1b:8f:fb:2e:86:7a:
f5:f3:cd:65:9d:e1:16:49:1c:a6:ff:fa:bc:30:88:
c8:5e:66:47:41:ff:66:a7:97:e8:4b:02:ea:22:1b:
43:67:dc:89:59:94:ed:e9:d5:80:9f:de:60:e6:6f:
75:23:1d:c0:e0:95:72:1a:c5:11:94:10:34:bb:e4:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:6D:35:39:0E:39:97:FC:F7:2E:9F:94:42:ED:83:63:B6:6C:1A
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:33:9a:46:77:28:62:6f:6f:46:f4:1a:e1:75:0c:8b:3b:09:
2c:ee:9b:d8:b8:c9:4f:f6:a5:70:87:bf:db:91:ef:7a:f7:f3:
ae:dc:2a:bf:7e:e1:ef:6d:8e:cb:7d:03:a1:59:8b:c0:07:e0:
80:be:dd:9e:9a:45:5e:69:e0:ef:3f:5c:03:4c:dd:30:fa:70:
08:be:84:ac:06:70:13:4b:9f:2f:34:6a:1c:e3:58:80:6c:dd:
6f:7a:5f:7d:bf:80:a3:a7:30:82:fb:48:ad:0d:2f:2a:56:83:
9c:fb:29:a3:2e:6c:0b:3b:eb:e0:40:ae:0d:2e:fa:95:cd:33:
4b:fa:8f:d9:5b:d9:bc:12:2c:6a:d7:52:c1:24:3a:61:96:ff:
83:10:83:bb:66:c7:28:71:8c:6f:3e:d8:e9:00:b8:d2:47:a9:
f1:43:fa:b5:13:56:50:7d:1f:c8:75:7c:12:94:e1:c9:2b:32:
a1:b6:d3:de:46:a4:8f:44:fc:4a:fb:8f:ba:fa:40:18:70:f6:
d0:e2:37:59:19:2c:07:08:ce:7d:ab:54:ad:8f:a5:da:e0:8a:
bf:db:8e:02:2e:d7:0f:24:00:78:44:e7:92:40:62:e3:dd:df:
27:5d:54:0b:fa:16:72:5d:a1:07:26:da:81:66:15:8b:a7:c3:
44:90:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:33 2025 by rpki-client