Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: tV9NMvQJt0K93FTfl5EmcyWrGfaSXXwLxJB8qEykzVU=
Subject key identifier: 40:9A:C9:EC:58:63:A2:D4:8B:B2:B4:F8:35:06:36:7E:4F:70:B3:1E
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0197B7EA881B36068DF3E26B3DF504AC4D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 157B
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: EJu2D8zshl6pvtE7FkgHukazOLOVwdXXzRp5plPCuCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:88:1b:36:06:8d:f3:e2:6b:3d:f5:04:ac:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=409ac9ec5863a2d48bb2b4f83506367e4f70b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:8d:ce:f6:00:33:3b:9e:f2:29:c0:5b:d4:
d6:e1:c5:bf:40:b8:d5:2d:fb:44:98:0b:f3:ab:16:
f1:19:c8:f5:a7:67:f4:04:6d:d4:d9:84:17:a2:4a:
2c:60:8a:cd:93:83:37:da:62:9c:14:1b:4d:4b:05:
f6:cd:a9:81:ed:f6:ff:c2:98:e1:a2:e5:50:2b:dc:
a6:20:6a:b5:aa:ee:e4:68:91:96:4c:9a:39:11:95:
52:1c:c1:8a:d0:a2:7c:6c:12:ea:00:df:0f:93:56:
fb:b8:f1:3b:f3:6f:ab:59:0d:25:1f:0f:67:32:49:
fa:e2:1a:ee:aa:a6:e1:f1:11:e9:69:2a:a1:e0:8d:
cc:d5:db:54:06:7a:40:f5:3e:ce:ce:fd:24:b0:ce:
79:4f:d6:8c:39:f3:73:8a:dd:b1:48:67:75:35:2e:
46:dc:fa:25:75:51:16:f5:48:20:88:84:0b:2c:24:
f6:a3:63:05:80:f2:ce:2b:18:11:93:0f:a9:9b:dd:
9f:68:3c:f4:1e:3a:74:f6:63:4a:06:9f:58:1d:33:
6a:16:68:8f:e8:3a:7e:58:ea:58:7a:c6:2e:79:67:
de:8d:0a:34:72:31:50:18:61:b8:71:86:f4:ba:ed:
e9:5e:83:f2:3c:75:67:c6:86:fc:5a:a3:e2:1d:52:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:C9:EC:58:63:A2:D4:8B:B2:B4:F8:35:06:36:7E:4F:70:B3:1E
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ea:d1:3b:db:2c:0b:6a:13:d4:b5:f3:2b:fc:19:f9:29:48:
3a:bc:84:bc:8f:21:51:c8:a4:30:96:12:11:df:8e:15:36:51:
a3:82:59:88:7b:09:14:c1:ae:55:af:cf:19:b6:87:38:cc:1e:
49:a7:45:ac:c3:b8:da:a4:00:e3:cd:0c:d8:55:e9:bf:61:c1:
a9:0c:c2:01:e9:6b:b3:67:96:e4:e8:7e:72:48:80:3b:28:c7:
55:7c:7e:4a:21:6f:c5:73:05:05:f1:6a:72:2e:e1:2c:2e:ea:
f7:e6:d3:c6:9c:86:27:4e:2b:30:5e:a2:ae:35:b9:c6:9e:43:
de:a2:53:95:0e:84:bd:39:db:84:e5:a0:60:b5:27:eb:09:17:
6a:66:9c:98:61:d4:80:f0:89:2c:4c:50:82:d2:43:e5:7f:02:
97:4e:76:d9:58:1b:d6:5d:18:ad:5c:01:e8:6f:2e:0c:76:69:
ae:20:5d:ec:2c:94:59:c0:46:d7:02:7b:e8:f4:54:3a:17:0a:
5f:6c:33:03:61:1a:12:d3:47:c1:04:e4:1c:86:72:97:30:12:
2a:f4:33:c5:62:41:1f:61:50:15:3d:84:9b:74:d0:47:86:9d:
bc:e3:34:00:35:81:70:67:26:c3:7d:64:a3:dd:21:e3:3d:c7:
8f:a7:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:58 2025 by rpki-client