Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: 7JiFFB+Qi7FzQkwSA621Uu3BgYdVgMtMZ20u1TESS6U=
Subject key identifier: 44:81:6F:85:CE:35:24:5C:48:15:8E:2B:DD:90:01:C7:1F:09:50:BE
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 0197B820EAB4EF1FDBEDBE1FE3BACA4111AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0BF7
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: y8aj1pEoPbMTPdiCFvN3SqM4yOSQXSlUudIou3oiA0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ea:b4:ef:1f:db:ed:be:1f:e3:ba:ca:41:11:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=44816f85ce35245c48158e2bdd9001c71f0950be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:6b:b8:27:5c:87:99:2d:e0:86:b9:a5:a9:
47:6d:d7:5a:a1:d8:c7:49:22:dc:28:5f:ab:b5:05:
bc:f6:d5:d1:9a:ee:8f:0a:5f:af:2e:dd:20:d8:7f:
d8:07:61:e6:e5:a4:48:85:27:84:2d:8c:9e:45:98:
56:06:2d:76:45:b9:f4:87:8c:ca:b8:e6:9e:86:ab:
49:05:e0:25:8c:dc:46:70:87:05:b0:a4:a1:cb:70:
37:cd:3d:36:b6:3c:8f:a7:c8:17:ac:2e:c3:a8:30:
8c:ee:65:b2:c3:31:a7:94:eb:a9:04:f9:35:53:15:
e1:db:1b:7b:43:63:ad:d0:c4:57:59:0b:80:ed:66:
f3:80:0c:6f:ec:fb:5a:3b:a6:b2:e1:72:eb:15:9e:
da:d7:86:c3:57:a8:78:f4:65:d1:ab:d1:7d:4f:c7:
22:a5:1b:94:e9:c6:7a:3a:09:cc:52:62:12:8c:58:
33:68:c5:ee:fa:f2:8d:17:b3:e6:46:d9:bb:18:c5:
b1:e8:77:82:34:d1:fd:78:48:38:b6:02:d7:d8:1b:
76:db:3f:90:3c:3a:21:ae:5b:ce:4d:94:09:5d:5a:
81:30:24:1a:41:1c:15:75:d7:bb:db:31:f6:ad:98:
f3:d1:1e:c6:da:82:7c:ff:4c:99:bc:90:fa:21:0e:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:6F:85:CE:35:24:5C:48:15:8E:2B:DD:90:01:C7:1F:09:50:BE
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:c0:16:58:ba:73:34:ee:24:49:30:71:ff:67:ad:04:46:
86:c5:4d:c3:6d:3d:4d:0e:3a:de:36:cc:71:88:f8:95:2e:b5:
88:8c:07:75:33:e1:13:f9:e4:30:89:3f:42:f1:a1:86:59:02:
4f:75:88:5d:75:c9:05:d4:fa:59:0c:af:95:89:6b:d0:d1:c2:
79:b3:f3:7d:a9:5e:c2:45:ad:05:c3:b3:c2:52:db:d7:4e:36:
3e:2e:37:81:3f:a3:ae:2c:f2:9a:e6:1e:77:76:80:8d:6f:c6:
58:27:6b:64:4d:7a:ff:9f:a2:50:b4:80:0f:94:6a:3c:f6:9f:
f0:d8:dd:e6:fb:54:fe:e3:18:2b:6b:5b:75:15:bb:1b:86:9c:
de:0d:f0:9e:92:d8:b1:99:7f:5b:5f:3a:67:c7:5b:f9:d9:4a:
9a:f6:c2:55:77:f9:5d:f9:f1:de:f2:f3:6a:77:62:25:82:a5:
e0:cc:d2:ee:41:7a:b3:68:73:f6:bd:b3:56:70:71:34:11:d8:
00:f8:cb:4e:ec:25:95:92:0e:fa:84:28:b6:16:14:fe:38:d0:
4e:e0:6e:9b:58:8e:ae:ec:5d:e7:2e:20:e7:86:da:6f:c0:87:
ea:d3:60:e6:40:5b:80:4d:e1:9b:a1:7b:35:c2:5d:74:19:5f:
d0:ef:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:14 2025 by rpki-client