Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: GhcpYpCzpnF1o1uRIGvKl55T+WEA7shvwXNs7yP49B8=
Subject key identifier: 09:DD:7A:0C:B3:B6:4D:13:B9:63:5B:BB:A0:08:71:18:18:8B:BB:33
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 0197B9D897036FDCF063FBC0B51CEEC0984B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 15C9
Signing time: Sun 29 Jun 2025 04:01:08 +0000
Manifest this update: Sun 29 Jun 2025 04:01:08 +0000
Manifest next update: Mon 30 Jun 2025 04:01:08 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: UBp6KEMgoS0os4isLGuGqiOZFzCD5Xae2oihPNt3qZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:97:03:6f:dc:f0:63:fb:c0:b5:1c:ee:c0:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Jun 29 04:01:08 2025 GMT
Not After : Jun 30 04:01:08 2025 GMT
Subject: CN=09dd7a0cb3b64d13b9635bbba0087118188bbb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:56:32:5b:11:eb:f5:32:29:96:63:a7:b3:
9a:79:65:ee:4e:37:d9:2e:1f:d2:c9:ab:b3:0a:7e:
49:95:7d:35:ef:55:27:32:9f:cb:b1:04:12:0c:56:
c6:33:92:8b:98:26:4e:15:9c:9f:f8:42:a4:7a:e7:
4a:a1:ea:57:89:b0:1c:87:dd:68:b0:b1:23:7e:90:
2f:1c:6b:98:8c:12:26:95:98:77:22:9a:8d:a3:98:
63:79:57:29:1f:46:bd:70:d5:74:98:68:fb:b6:25:
77:2b:26:b2:49:b1:1c:8c:23:f5:a3:30:7f:d0:58:
86:23:dd:7b:b1:af:77:46:c5:41:9d:ba:c9:7e:46:
7e:69:8a:24:3a:7b:59:5c:77:e4:d4:92:09:db:8e:
a9:9f:2f:84:85:8a:14:0f:81:63:83:c9:d3:26:dc:
0c:f6:a6:ef:9c:c0:8a:3c:08:96:1a:ee:4e:f0:45:
5a:da:c9:3e:6b:d9:b1:1e:cc:13:d8:5f:4a:bb:6b:
ab:69:0b:4b:ef:f3:09:9f:b7:0e:f7:40:7d:39:bb:
09:78:43:70:3d:8b:d8:56:1b:00:17:6f:81:5c:8b:
fe:1d:33:83:75:e2:2f:a5:d2:37:1f:30:13:de:af:
9b:f5:ef:fb:b4:d8:99:66:2b:14:6f:a7:3c:5d:5e:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:7A:0C:B3:B6:4D:13:B9:63:5B:BB:A0:08:71:18:18:8B:BB:33
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:e8:21:80:e9:c9:64:a6:bc:cc:19:cb:69:37:1e:6c:93:
a6:62:22:31:90:95:11:9a:62:ed:6c:c6:e8:d2:df:e9:15:aa:
5c:29:99:1d:a0:0d:08:8a:87:ac:6d:69:40:99:6c:1c:da:22:
cb:c4:09:88:28:ee:cd:21:24:dc:c1:a3:70:ef:58:9f:d3:a7:
26:6b:d5:ea:98:72:91:e6:5f:19:72:23:c6:62:65:92:c3:2d:
a3:03:32:40:04:68:49:84:bf:18:28:5c:ae:91:fe:27:ab:ae:
7c:91:c9:ae:42:6d:56:3e:f9:d1:f7:35:6b:26:9e:d4:23:77:
3b:6c:99:c0:2d:c8:d4:9f:32:3d:a0:bf:63:fb:e5:bf:04:ed:
f3:a3:9b:db:eb:a9:81:60:2b:b4:7e:21:69:d3:fc:63:73:f9:
42:37:7b:d5:b0:48:82:26:88:9f:78:12:df:53:7d:02:c1:55:
3d:e9:47:7a:f7:81:d2:54:ec:5d:96:4f:ed:39:50:92:1f:b5:
c3:6e:53:de:7d:9f:89:09:8f:6b:64:ab:77:01:3b:53:53:73:
d8:c5:b4:fe:04:ff:71:ba:ef:a6:1f:93:49:3f:ed:48:89:f3:
17:0c:30:d1:69:61:28:9d:e2:19:62:90:1f:5b:70:15:9e:85:
13:c1:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:49 2025 by rpki-client