Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: dGBxkWMtZpHTT3cyFOHu3ck9pCldquSGQ5WeA9zUSgI=
Subject key identifier: 3A:9D:1C:E8:BF:C1:FF:DE:53:6F:F8:C0:91:01:7B:2A:56:B8:8A:A6
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 0197B8FCC68D5A65880E53F90AFCB52166AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 05A9
Signing time: Sun 29 Jun 2025 00:01:03 +0000
Manifest this update: Sun 29 Jun 2025 00:01:03 +0000
Manifest next update: Mon 30 Jun 2025 00:01:03 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: +2P6Vp4zpYcerxEu4XMnoF+sWG3nKj6i07hvzLlOP2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:c6:8d:5a:65:88:0e:53:f9:0a:fc:b5:21:66:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Jun 29 00:01:03 2025 GMT
Not After : Jun 30 00:01:03 2025 GMT
Subject: CN=3a9d1ce8bfc1ffde536ff8c091017b2a56b88aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:21:dc:b7:46:5d:aa:7a:15:10:56:d1:a2:
2e:94:cf:5d:6c:34:55:9b:c0:e0:65:8f:33:98:3d:
2f:2a:6b:89:9d:58:9d:0c:7e:72:b2:6c:b9:f6:e4:
f1:ab:55:a3:13:01:74:22:7f:f0:4e:d5:9a:09:98:
a3:8e:3b:d0:ee:cd:61:22:9d:14:3d:e7:3f:2a:45:
bd:50:47:58:9f:25:5d:8e:42:6b:b7:27:de:96:fd:
c6:d1:01:1f:48:c3:e3:b1:2d:a7:6e:ac:28:3c:f5:
ad:72:98:60:5c:fc:6f:ea:e7:9f:1c:15:34:67:45:
77:13:00:0b:30:cc:01:0d:57:f1:86:bc:70:b9:18:
6a:00:25:b0:1e:d4:ca:84:e6:fe:5f:34:c7:cf:8c:
d7:61:05:5b:38:a0:2c:fb:00:e1:fc:a0:9c:09:92:
d4:8f:f2:6b:0f:0a:b1:46:f9:13:cf:24:3a:a0:48:
e4:3d:77:cb:c6:19:6f:1f:14:23:6c:f6:27:79:d2:
26:da:19:38:77:d3:fc:3b:6f:0a:69:67:af:51:23:
fd:7d:14:96:94:05:70:28:90:71:c7:7c:e4:77:e9:
93:50:2c:3a:9e:b7:04:ee:86:24:8c:f8:ce:3e:4e:
3b:16:b6:9f:c1:52:34:9c:18:86:85:09:ea:a7:d1:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:1C:E8:BF:C1:FF:DE:53:6F:F8:C0:91:01:7B:2A:56:B8:8A:A6
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2d:8c:dd:db:01:f7:23:29:03:8c:ac:b6:a9:84:d3:bb:82:
12:c4:21:81:2d:a3:f3:39:2e:18:ca:15:38:58:4f:3c:d6:7f:
3a:8c:e8:1f:77:48:5b:3f:bc:70:ef:11:68:00:e8:dc:13:9e:
37:6e:fb:30:d9:60:a5:e6:39:05:b6:ea:46:4d:32:b4:12:e3:
48:04:a2:34:57:7b:a9:d3:6b:d3:0a:15:d6:71:49:b8:25:9d:
88:30:8f:20:b2:89:22:68:ad:ea:d3:67:3a:d5:ee:1a:b5:45:
49:92:ca:15:c5:43:c5:35:4c:c1:74:5a:b4:5f:3f:7d:2c:ec:
2c:aa:04:e1:c7:33:3c:d4:01:3c:c0:be:18:b6:79:66:59:b7:
92:a1:f1:b3:91:5b:7a:9c:1d:8c:9b:df:ab:36:8c:1b:90:47:
5a:a9:44:75:9c:ba:3c:e1:3a:9d:3e:5f:66:7b:33:42:3a:8d:
c9:82:cc:ef:c6:09:da:ae:6c:7f:f5:f5:52:22:a5:1a:e3:e0:
60:dd:93:ee:6d:15:72:cc:a5:20:49:c0:f5:84:82:d6:8c:f9:
ca:eb:65:a7:a5:aa:fe:6c:bb:62:2d:b7:95:33:ae:8c:de:c2:
e5:13:94:fd:6d:eb:49:24:fe:d0:4d:e1:9c:42:26:89:02:eb:
d9:80:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:20 2025 by rpki-client