Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: UyDRKP8gffxBTZg4CjYevQFyw87jrnbSYWp1fv3UaCY=
Subject key identifier: E1:D5:81:46:CE:49:2E:C6:76:57:85:D2:66:87:D0:00:D6:93:9E:15
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0197B8C5C7B27CA8E1F4BA393FD4CD760608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 097F
Signing time: Sat 28 Jun 2025 23:00:58 +0000
Manifest this update: Sat 28 Jun 2025 23:00:58 +0000
Manifest next update: Sun 29 Jun 2025 23:00:58 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: EZ+oyZExR6OaoIR5cwW3tLlcdljFIIsUPnKZFgVBP60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c7:b2:7c:a8:e1:f4:ba:39:3f:d4:cd:76:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jun 28 23:00:58 2025 GMT
Not After : Jun 29 23:00:58 2025 GMT
Subject: CN=e1d58146ce492ec6765785d26687d000d6939e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:12:89:41:99:d8:b7:b1:2f:80:91:56:e8:
cd:bf:cc:10:ab:d8:78:e5:60:91:d1:bd:1d:8e:37:
d2:fb:3b:b6:da:a5:b1:6a:75:67:23:7c:de:12:5e:
ec:61:c5:35:c7:72:28:f8:cb:b1:7c:5a:83:cb:c2:
35:4c:d9:bf:6e:f0:a3:c7:d5:bb:d5:e9:7c:55:85:
d1:34:05:71:c4:29:d9:9b:31:04:37:93:40:56:3c:
e5:f7:e7:fa:0e:e9:09:32:73:34:18:e5:53:00:c3:
1c:41:3d:42:84:37:29:78:75:13:b9:25:40:5a:5d:
57:6c:cf:85:39:05:12:59:a4:c3:85:04:b2:25:99:
be:87:7f:bf:ae:54:8f:47:37:29:b2:c5:fb:a4:a1:
db:26:38:7e:33:e8:91:94:ce:7f:ca:d4:93:f7:79:
0a:01:00:f4:35:aa:26:a4:74:da:29:65:c7:83:d4:
50:08:f2:e1:b0:c8:cf:02:46:5b:78:8e:2e:a6:bc:
13:a9:53:7b:48:c4:25:10:97:5e:1e:95:b0:3d:a4:
ad:77:5b:15:63:fb:c0:c2:fa:18:4a:55:aa:12:66:
38:58:34:81:87:4a:9c:f9:91:44:9d:dc:d4:77:03:
59:29:a6:29:a4:73:13:bd:f5:de:d9:58:c4:38:fd:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:81:46:CE:49:2E:C6:76:57:85:D2:66:87:D0:00:D6:93:9E:15
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:48:5f:17:87:08:79:2d:b0:36:cf:20:91:3f:6b:f3:ac:10:
47:8b:12:cc:b8:bd:f8:74:96:a3:7a:d7:ae:12:5a:df:26:cd:
56:85:9e:7f:c3:7d:10:73:8c:bb:b5:ba:9a:2f:fc:4e:cc:ce:
2b:e0:8e:a6:60:bb:fa:4e:88:ee:2f:32:27:17:91:1b:ba:95:
17:5c:59:90:ff:4b:57:60:d4:b5:91:45:a0:bf:27:91:83:a3:
7b:6b:c3:36:79:67:b8:be:f9:06:f9:50:bf:78:83:a2:b4:19:
a6:76:a5:36:4e:d4:66:ef:9c:e0:91:4d:67:94:bd:fb:27:27:
c1:61:cc:1c:d2:3c:79:25:91:0b:c6:5f:9b:c2:9e:07:5e:bc:
41:d3:f2:ce:c0:30:93:59:34:01:b7:89:42:a3:7c:f0:28:10:
72:25:c0:0b:c9:7b:e4:33:a6:4f:ea:ea:53:fe:6f:73:ea:86:
75:e8:53:76:28:6f:4a:62:b6:91:bc:1a:65:b6:3c:f6:27:de:
2d:14:26:20:71:07:b6:b8:4e:85:4c:f9:28:45:81:fa:7b:dd:
cf:f7:01:a8:d0:98:fb:0d:f7:69:b2:7e:73:1c:5a:6e:d1:01:
ce:41:3f:ba:72:a1:17:c3:d8:a9:56:30:5f:c0:67:92:6d:7e:
91:0e:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:01 2025 by rpki-client