Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File: UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier: l/b0XtIpAXX9NYN9ktVO4MxIhPsvTKD/AOlAKCaMaps=
Subject key identifier: 52:BA:61:FD:65:3D:14:AB:31:88:59:37:4C:3B:DB:DA:B2:F8:FC:B4
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial: 0197B70F306ECAA8A6AC75957A29E31ED710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number: 0EE9
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (hash: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=)
2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: 9ChGH7hQC+fLAemPqaFsnIRCaWJWXLz6D+QEtPMN3Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:30:6e:ca:a8:a6:ac:75:95:7a:29:e3:1e:d7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=52ba61fd653d14ab318859374c3bdbdab2f8fcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:97:2e:ab:8f:82:c9:55:6d:c3:ef:8d:cc:
4e:07:1c:89:8c:d9:3a:87:ba:43:40:f6:b6:14:ea:
bd:39:58:07:1d:44:a0:1b:e8:08:6d:20:9c:ad:65:
20:ce:4a:83:4c:ec:c5:9d:ee:e7:73:bb:09:e6:1e:
96:e7:e9:22:2c:ec:d4:83:a9:c3:1b:5e:76:0b:dd:
89:58:8e:7d:27:23:80:9f:5d:fd:fe:a7:27:10:f0:
e3:18:a1:91:5a:47:da:67:47:0e:9c:fc:d9:b2:ce:
80:76:57:a6:f7:50:35:78:11:bd:fc:b0:80:59:87:
4c:a7:78:7f:46:63:4e:4b:5b:b0:b4:48:2c:bf:61:
90:bc:97:4d:2f:8a:ae:0b:6d:87:e2:05:7c:6e:66:
44:51:d1:67:14:c8:15:42:01:f8:95:3a:af:34:dc:
78:2c:86:84:0c:1e:4d:91:38:35:19:03:ea:ea:82:
89:96:6a:e1:48:e4:85:dd:79:0b:a9:65:1b:ba:3b:
3c:86:a0:f5:20:eb:51:3a:9f:a2:80:4e:3f:a1:db:
22:f9:51:c2:46:f4:09:8a:37:7f:ad:12:71:ed:17:
40:76:b3:0c:3e:5c:22:9f:43:5a:68:94:38:8b:2c:
98:f5:cd:73:3d:9b:e0:14:97:66:f0:fc:c2:e2:3e:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:61:FD:65:3D:14:AB:31:88:59:37:4C:3B:DB:DA:B2:F8:FC:B4
X509v3 Authority Key Identifier:
keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:ae:98:65:cb:80:34:b6:9b:22:65:c5:04:d3:40:44:5a:
37:16:0a:2d:2f:06:84:8c:71:7a:aa:e4:8b:20:4a:90:25:9a:
07:23:5e:63:81:1c:34:97:bb:69:4e:77:ba:1f:d7:3a:6e:7f:
a9:72:b7:5a:8c:94:ce:2b:a5:7c:a7:c2:a2:35:62:a5:a4:0b:
47:04:13:08:e3:26:f9:d3:a9:48:c6:8f:14:ab:5b:14:45:ba:
a5:60:56:ca:3f:e5:40:3d:e6:2e:55:de:82:92:1e:fe:93:18:
9b:1b:10:cc:42:da:74:db:79:fa:8f:ad:fe:a5:e8:30:4b:1a:
6e:f1:45:e9:07:5e:cc:fa:99:34:a4:02:a2:96:c9:72:10:53:
6a:5a:21:79:25:f3:dc:04:af:07:6c:c6:90:51:26:a3:40:97:
5b:86:20:ba:98:5d:ae:34:02:1a:ae:38:54:e2:5a:ac:09:1c:
c9:89:d9:38:e9:cf:7a:c9:ef:df:9c:99:93:20:e4:06:f0:af:
34:0b:26:81:d3:9e:c4:ad:71:76:f2:6a:85:98:7e:bf:12:05:
55:23:19:55:83:0b:a3:ac:b7:7b:46:15:f6:df:ac:53:b8:c0:
a7:9d:6b:0c:1c:46:5c:29:7a:f6:71:e3:30:8b:37:ac:8e:b5:
ec:4b:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:50 2025 by rpki-client