Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier: CcfhNRC2+v5LRpOA+PkLAY8+8XF4JVt49YOlMrktTPM=
Subject key identifier: EA:97:7C:05:6E:02:1C:19:37:15:1D:1E:77:6D:2B:0B:B8:BA:6A:06
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial: 0197B70E86D9BC31E063EC7BDE28136D1FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number: 12B7
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: NhV29ge/OvfMDOrDaoCkR052N1mb8IGcuOJ+x1Z4kpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:86:d9:bc:31:e0:63:ec:7b:de:28:13:6d:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=ea977c056e021c1937151d1e776d2b0bb8ba6a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:93:54:0c:95:10:f5:c2:c5:f0:fc:33:63:
66:41:e2:f3:4f:b8:ec:4f:df:48:7a:ec:28:15:63:
c7:8b:2c:1a:3c:08:df:78:9c:e3:02:35:22:96:67:
df:2d:ee:29:45:0e:f4:da:b2:22:a4:04:38:b7:52:
14:54:62:dd:17:67:49:56:d0:35:96:5f:5d:79:c9:
09:99:c0:59:ca:8a:60:06:f6:66:07:8b:59:f4:ca:
23:23:84:71:eb:23:22:2c:25:e9:3e:65:f4:55:66:
9d:5f:52:45:29:fc:e0:13:b8:82:4d:ca:08:20:70:
4b:e5:18:98:1f:75:7f:a1:13:a1:b1:5d:83:05:f2:
0c:55:14:0a:b4:97:1e:fb:2a:17:f1:78:4f:ef:a7:
b1:bf:8e:eb:e2:25:03:b8:1f:cc:99:cf:79:7e:3e:
cd:b7:52:74:c5:3a:83:dd:a3:a4:b7:0b:c0:5e:8f:
e7:b3:a4:4c:d3:5b:35:47:93:1a:94:09:3f:80:07:
43:0d:ec:0c:5c:7d:0d:80:9a:f6:df:e2:98:b6:47:
b8:3f:20:d6:61:a3:b2:a5:e0:b8:22:05:68:5c:96:
ae:81:a3:46:d1:a8:b4:9b:0e:82:b7:a3:bf:21:2b:
c1:45:0c:da:62:a8:54:f3:29:25:3f:be:da:93:02:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:97:7C:05:6E:02:1C:19:37:15:1D:1E:77:6D:2B:0B:B8:BA:6A:06
X509v3 Authority Key Identifier:
keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b6:58:32:ce:d7:32:2c:e1:ef:5d:18:6c:5b:47:1d:75:48:
6a:d6:cc:c1:e9:43:f1:82:4b:2d:83:6a:c6:74:ae:cc:ac:4d:
08:4f:dd:90:d6:00:13:e1:bd:e6:00:8c:fb:4b:02:3a:fd:52:
cb:8e:d0:9c:48:4e:cc:28:77:68:41:01:db:7c:db:0e:e1:73:
49:70:72:ce:f3:4a:8f:55:f9:3c:db:e9:34:97:25:9d:46:5b:
8b:1f:bc:a0:81:80:05:86:79:e6:21:ea:3f:81:d2:77:e9:c3:
12:3e:db:81:05:b9:0b:f5:dc:89:56:d3:f0:a3:5f:fc:2a:bf:
64:f0:20:e2:16:42:77:7f:da:ff:c9:ac:dc:46:2d:b2:dc:46:
7f:2b:1a:32:61:92:fa:c4:57:7a:6c:9a:18:6c:a3:79:4d:ed:
02:fd:7c:0e:98:f3:cf:f5:f1:51:ab:21:8d:6d:cb:a9:19:3f:
2e:3d:4f:83:65:dc:09:ed:5c:51:1d:da:c8:15:83:eb:27:42:
3f:59:0f:86:d4:da:b7:84:76:07:ea:e6:fa:cc:19:a5:1f:e7:
9f:d8:3a:96:97:f5:40:49:0f:27:6c:d5:10:3a:ef:93:e5:b6:
f2:1b:5a:3a:7c:8b:ff:67:11:95:b7:29:69:e2:70:cd:b7:a3:
f0:b6:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:51 2025 by rpki-client