Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: g4J1cP5MpFgCIbsLc9bdABxvCEhSCiiQbjrEjimemFQ=
Subject key identifier: F3:49:A1:FE:14:90:F7:2B:F9:93:9A:12:64:BF:33:1E:C0:2A:85:78
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 0197B821324598E9DB2DA44155CC154ABADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: 3AUbLYXFIcq/AR0TPavkXWyIu2KXP9Zq3T7sPFBz1Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:32:45:98:e9:db:2d:a4:41:55:cc:15:4a:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=f349a1fe1490f72bf9939a1264bf331ec02a8578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:98:ad:d7:06:f6:5f:dd:fc:8b:2b:db:05:
d6:5c:36:31:61:ca:9d:7b:9d:de:74:35:f7:f2:ea:
a1:14:e5:99:1e:db:a2:5e:ca:bf:6d:8b:b1:78:9d:
16:ec:1f:75:74:46:c1:b1:e2:fe:fe:2e:60:a9:3d:
b9:f8:c6:7f:47:35:2d:8a:b9:6f:c0:34:7c:73:aa:
88:a8:35:d3:84:93:7f:19:8d:6b:e9:75:e5:88:f4:
53:b1:e4:eb:fc:48:89:22:d0:53:33:ea:c6:11:db:
01:54:0d:4a:a6:d4:95:ea:9f:1a:6b:aa:d4:c2:8b:
91:44:67:1c:21:ad:7a:8e:c0:cc:e2:6a:e9:08:72:
1c:09:5a:14:a5:cf:27:3a:c2:0c:38:87:0c:e1:30:
75:98:13:12:22:8e:7c:21:05:cf:05:e1:89:a0:62:
76:23:ef:26:ef:e3:ca:88:20:75:52:a6:7c:c0:a1:
5a:2a:eb:60:80:b4:5d:73:c6:e3:0f:61:4f:5d:6d:
fa:96:95:6d:6d:f5:63:ef:18:a6:81:52:47:42:57:
e5:62:bc:de:39:0c:db:d8:9f:c5:67:7a:8e:ec:08:
d7:0e:68:25:e9:e9:68:33:6c:99:2a:c2:4f:9d:a3:
42:72:c8:91:c2:dd:34:18:43:b7:37:b8:31:8d:ad:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:A1:FE:14:90:F7:2B:F9:93:9A:12:64:BF:33:1E:C0:2A:85:78
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:ea:b0:68:1d:88:b7:09:44:b1:8f:18:95:28:39:13:ee:
41:c0:48:ee:43:ad:4b:b9:76:e8:97:76:05:11:e8:da:53:13:
76:86:9f:a0:fa:60:6d:81:0b:bd:78:78:01:20:5e:42:d4:fe:
1f:3b:99:06:17:3f:8f:72:3e:11:4a:68:85:c2:2d:e6:10:a4:
ae:56:a2:d7:a0:71:9a:29:0e:96:23:8a:24:d7:0f:ed:84:21:
bd:27:96:97:a0:ee:c2:ff:dc:14:0f:9c:c2:ec:c8:5b:39:6d:
e7:f6:ec:e1:93:db:74:ce:e0:93:df:65:e9:99:00:ac:16:75:
75:07:0d:4a:8c:54:c7:00:b2:4d:d9:94:5a:dd:72:96:f7:de:
a1:ac:f7:19:49:14:90:a5:b1:d3:f2:08:eb:ca:89:01:22:79:
c5:d5:d6:7f:1e:ec:4e:07:9d:13:85:b4:53:fd:ba:25:49:c4:
05:26:89:51:d0:d9:39:05:c4:ba:ea:c3:f0:c2:7c:7d:35:dc:
bc:06:13:2b:65:d9:b6:30:cc:80:9f:31:d6:e6:90:be:23:a3:
c6:4b:b3:e6:ff:05:ae:45:7f:1c:70:7d:d1:5d:ea:ad:4d:07:
e4:ac:a6:78:a8:c9:be:31:cb:b4:dd:e8:83:b1:4e:14:4c:a5:
ba:aa:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:15 2025 by rpki-client