Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: VG6DXbke9cZ3gNrtGFK4M9gGuvsgqBdBnALXwD4dr3k=
Subject key identifier: 4E:53:F6:2E:14:AC:E6:6A:C5:7A:2E:C4:E8:3A:9E:DD:5B:0C:21:28
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 0197C0B68220DEF2C15F5F50583FCB79663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: 0185
Signing time: Mon 30 Jun 2025 12:01:15 +0000
Manifest this update: Mon 30 Jun 2025 12:01:15 +0000
Manifest next update: Tue 01 Jul 2025 12:01:15 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: mrl8avUmNmjloDXc1SR+LIAlyLLNjGir72vA0wXnSsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:82:20:de:f2:c1:5f:5f:50:58:3f:cb:79:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Jun 30 12:01:15 2025 GMT
Not After : Jul 1 12:01:15 2025 GMT
Subject: CN=4e53f62e14ace66ac57a2ec4e83a9edd5b0c2128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:6b:52:1f:d3:ec:77:ac:3b:36:f0:2f:56:
6f:6b:f7:94:08:cd:37:39:df:ea:30:22:45:7b:83:
e4:f4:cf:5f:02:71:04:16:42:c1:ee:15:6e:e5:65:
39:9c:15:1f:92:b9:d3:95:15:04:b2:99:c4:a2:f7:
e9:2e:52:8a:d5:59:b9:bd:a5:9e:d2:d7:14:2a:84:
d5:b5:36:20:5d:44:55:73:6b:78:8a:26:76:cf:a2:
38:3f:e2:9d:e6:1b:08:e2:98:4a:27:96:9d:0e:69:
56:7d:f5:79:22:d3:fa:0a:ec:ca:d3:7b:c9:59:67:
1a:69:c7:a7:0d:b4:75:4c:ee:6c:b9:ee:bf:a4:88:
7a:e4:ba:63:87:92:11:56:31:5d:60:20:92:f6:0f:
2e:75:ac:6c:6e:05:f5:cd:6a:94:c8:d7:62:4f:ca:
9f:ec:4b:54:4c:75:f5:3f:d4:e8:39:07:1e:6f:96:
1d:48:61:c7:3e:d4:dc:76:fc:8e:11:3a:e1:d2:e9:
9a:6e:37:73:74:6d:58:6b:5f:fc:6f:b3:e2:91:43:
09:c5:fc:b2:f5:1d:25:3d:ce:34:16:8a:ac:b5:6b:
31:d1:94:6d:91:ab:a2:a6:48:52:ad:8c:54:6d:41:
90:4b:2a:d0:a1:e9:1a:9c:a4:76:a1:37:6e:52:70:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:F6:2E:14:AC:E6:6A:C5:7A:2E:C4:E8:3A:9E:DD:5B:0C:21:28
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:1e:ab:3a:8e:7c:35:92:81:f0:09:af:ea:24:97:74:fa:
58:68:c2:f2:9d:16:83:21:51:07:18:41:0f:be:a1:91:d6:45:
67:11:85:2c:da:f0:f5:4b:a3:a5:c6:26:c2:9e:a7:06:71:b7:
83:f5:be:b8:6a:6a:de:2e:1f:57:3c:4d:c2:89:2b:46:7d:34:
ec:0b:f1:be:02:85:89:a0:93:f8:aa:cd:27:71:68:c5:3c:ea:
59:f7:14:f2:72:09:fd:35:67:f6:9f:b4:95:69:03:0b:60:0a:
4e:e0:e4:57:79:85:23:ad:15:af:b4:b1:f6:39:ce:02:44:25:
be:2a:42:2e:60:73:a5:49:0a:cb:23:05:c7:fe:3f:4b:22:f9:
4c:5f:d3:26:23:0a:5a:2f:bc:0e:4f:29:33:7d:a5:3a:8a:c3:
dd:41:92:00:75:f5:98:81:ad:6f:d5:13:80:76:67:7d:db:21:
51:27:07:c7:14:b5:df:b2:9c:19:bc:c3:0a:d2:f8:2a:2d:d3:
ab:a7:78:54:c2:97:00:2c:67:a9:db:50:ee:58:69:b9:af:a2:
61:14:92:6e:70:e5:5f:0d:4a:46:61:f7:75:8f:56:44:04:2c:
70:7b:f2:5d:a9:5b:7c:8f:59:9c:5b:91:8e:87:4b:c0:a6:00:
0c:28:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:15:12 2025 by rpki-client