Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File: uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier: 4XIUxgTv1gDsvzaVcXXGsnhwT/stBct0WMJDaHp+4o0=
Subject key identifier: 19:F6:D6:8D:33:08:23:D5:54:4A:30:C8:6F:B5:50:16:78:E8:53:CD
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 0197B7EA24EEFF0FD0DAC0CBD3367450011F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number: 0CBC
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: X0jeMv94S+ChT8iCuTY5JuR7zfZUCa3j84COr5XElCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:24:ee:ff:0f:d0:da:c0:cb:d3:36:74:50:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=19f6d68d330823d5544a30c86fb5501678e853cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:20:fe:34:e1:4e:2a:2c:48:7a:cb:29:c2:
a1:cb:e4:ec:7b:09:b4:71:7a:14:a9:91:4d:cc:f0:
e0:80:e5:40:91:2d:4e:2e:b3:01:96:24:1f:d9:ec:
92:68:fa:b7:d8:af:a9:66:e6:ed:5c:59:52:3a:5f:
24:03:51:2b:5d:61:54:c0:bc:aa:29:16:b1:72:0b:
78:27:f0:e2:25:84:95:49:f2:cc:93:21:3a:9a:fe:
fe:1b:5c:a7:64:86:73:21:2e:4b:26:9d:56:ce:4c:
de:5b:f3:d5:50:73:53:fe:ac:50:b3:af:58:f1:d4:
5b:73:b8:dd:02:2b:31:1f:bb:39:7c:ac:e2:d0:34:
1f:61:df:ca:92:e8:23:80:c3:1d:d6:13:9e:24:4f:
87:29:03:7a:ee:9b:be:ef:4a:e4:f3:38:ff:d6:16:
09:47:5c:8d:54:4a:9c:1e:62:d8:62:cd:12:6e:33:
3a:9f:95:f3:a3:ac:84:17:35:81:43:ea:a2:3c:76:
28:67:f3:d9:6a:55:c9:62:72:5e:9c:f4:85:7d:0c:
9d:6e:02:c9:c2:1e:9e:bb:7f:5d:5e:af:2e:9a:bd:
64:1b:c7:38:59:f1:99:01:75:8a:02:07:8b:c7:c9:
94:d7:d1:34:b2:bf:82:40:b6:73:88:84:d7:71:ec:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:D6:8D:33:08:23:D5:54:4A:30:C8:6F:B5:50:16:78:E8:53:CD
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:ad:01:0c:5d:ac:eb:16:8f:a7:8a:36:00:7f:2b:e4:0f:
b5:1f:61:7a:18:76:fb:2f:d0:b5:14:d1:28:9d:31:c5:a4:f7:
ec:55:91:2d:c8:94:03:b1:89:a6:3f:69:56:b4:55:12:bc:07:
6a:ac:98:c4:4e:e5:60:dd:fc:0c:05:51:f5:64:de:bc:79:9c:
9c:7f:21:c8:76:5d:df:ec:c6:2b:33:e0:42:ed:4c:80:95:54:
bf:9c:5f:f3:a6:3b:38:5d:b4:8f:68:fb:dd:fc:cf:06:57:a0:
39:4c:b9:57:cf:0f:8d:3b:f3:5d:75:fe:10:0e:50:fe:fa:d5:
f7:32:33:a8:e7:33:94:b6:6b:6f:44:de:e8:6c:e4:0b:6c:c2:
2d:19:07:7d:e0:42:d8:d4:1c:46:5f:b2:a5:66:f8:60:84:b5:
33:f0:6e:cf:34:1b:11:7b:4d:96:b2:e5:9e:5c:a9:d6:61:77:
60:2f:21:95:34:52:bd:d9:fb:09:db:da:b0:76:65:bc:7e:48:
ca:24:db:21:d8:87:3f:ec:32:e6:a4:15:f4:18:6b:0b:46:62:
1b:be:d2:96:96:b0:80:86:1b:f6:57:bd:e2:fb:39:42:11:4a:
51:91:90:3d:9e:73:dc:81:93:cc:d4:8a:4b:56:a5:96:d7:fc:
c7:dd:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:28 2025 by rpki-client