Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: 70v3r/sfebuVdZDPVRnykw0Wg8SBKMBW2ZgspmpeA9o=
Subject key identifier: 3C:11:9F:7B:51:94:EC:18:13:6F:CB:24:BC:FE:E5:63:B1:AE:68:A3
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 0197B632B4719375EFBC245B47D13268AA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0C8B
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=)
2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: TRZRAiVct1EH2VSzHmHdaqyKHCq2G98g2+/5IKwNMas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b4:71:93:75:ef:bc:24:5b:47:d1:32:68:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=3c119f7b5194ec18136fcb24bcfee563b1ae68a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:4f:80:47:d4:c9:3b:15:cf:6a:84:33:d6:
07:db:3f:e0:53:9d:b1:5b:19:10:b1:8a:42:cb:2e:
ed:7d:2c:17:28:86:d9:dd:a6:e4:c9:fb:74:aa:2e:
de:d6:5c:37:90:89:57:5a:e9:91:d2:68:ff:fb:34:
c5:1d:11:6b:c2:da:cb:6e:e2:96:03:97:29:9b:71:
3c:3c:df:8f:93:59:9f:ba:88:71:42:6a:f9:47:78:
11:06:81:3f:15:e1:86:e7:d8:9c:62:78:59:92:51:
69:2b:60:6d:49:c1:c9:ec:72:29:61:5c:d8:8b:d9:
4e:22:02:61:76:3d:33:32:86:22:48:08:30:ae:9f:
b7:e2:0a:cd:7b:7a:3f:e7:de:f2:7e:70:f1:ea:00:
8d:43:40:ae:5d:e1:84:d6:0c:5f:0a:71:61:93:0d:
3d:52:ed:b9:e3:ab:32:65:1e:88:1d:41:e2:9e:3a:
22:28:43:74:fa:97:35:82:9c:5e:69:3e:eb:4d:27:
61:91:14:54:54:9b:b7:fd:2c:24:e2:ad:ec:9f:39:
5e:2d:00:1d:e7:32:1f:85:47:27:4f:c0:9d:30:4f:
3b:5c:5c:99:64:f8:10:99:dd:99:ad:a1:72:04:c9:
00:c8:18:4b:d1:fb:f0:ef:3f:9a:fe:59:94:9e:a7:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:9F:7B:51:94:EC:18:13:6F:CB:24:BC:FE:E5:63:B1:AE:68:A3
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7e:5b:a5:a2:ea:4d:6b:27:c8:ef:79:07:ba:78:93:21:86:
d6:68:77:8c:75:27:1d:f1:1e:84:e9:95:db:86:96:df:23:e9:
ee:e3:ef:61:1d:f2:2f:39:52:92:6b:f9:56:c8:11:87:8e:3a:
70:42:71:a4:76:bb:37:e6:ab:74:c9:d3:3c:90:4c:12:c5:9b:
e5:a9:ef:77:0d:b8:ca:bc:2f:32:02:6c:40:87:be:95:d9:c1:
5b:d2:4e:b6:d1:49:4b:1d:eb:79:1f:af:a1:45:2a:14:dc:7c:
88:82:d4:81:4f:31:1c:56:b3:ab:60:52:ef:cc:e8:d6:4e:3f:
8c:eb:3e:f2:f7:c5:e6:9b:fd:74:c1:44:e5:f1:fa:72:2a:2e:
45:c0:c4:d2:32:e9:92:7a:e0:95:e7:96:ed:59:85:84:ed:a1:
d3:6c:4d:ad:76:65:69:f7:05:c9:08:01:25:2d:67:29:f6:5d:
4b:00:58:1e:c5:ae:4a:e6:9f:65:35:6d:10:69:f3:66:4f:38:
a0:aa:fe:5d:a1:7f:53:de:97:52:d4:60:5e:41:f3:dc:ab:f9:
fb:fd:7e:09:02:75:2e:64:38:9e:b9:1a:70:cb:2b:3c:94:b1:
6c:3a:cd:39:30:62:ff:4e:ce:01:a4:39:a7:83:27:d7:dc:17:
38:af:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:12 2025 by rpki-client