Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: BHoLYRtkZra9cc7OlhKRyxx45271U4Ux4k/qUEeYre0=
Subject key identifier: 1E:2C:76:37:28:68:66:D0:AD:5D:FA:79:69:A2:5C:6A:1F:35:61:C7
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 0197B6D7BCE3E7571706B50B50E2B8BBBC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0D1B
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: bXVjwD8+BN5WwW9XiWzVbm6+rzhODibOiAZnbLdHiYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bc:e3:e7:57:17:06:b5:0b:50:e2:b8:bb:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=1e2c7637286866d0ad5dfa7969a25c6a1f3561c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:76:0d:9b:29:fd:fd:1e:d6:81:ab:e9:4a:
07:59:89:52:ae:1a:bf:a8:74:e4:1a:c6:9e:ea:fb:
5d:91:f0:89:f2:8a:a9:99:ae:6b:06:87:76:54:6a:
af:f5:41:17:d5:9e:72:1c:38:cc:d4:93:72:bf:3d:
95:92:42:39:a7:69:87:69:fe:8a:63:78:ac:d2:54:
4c:09:2f:92:fb:b6:71:e5:5b:93:3b:cd:9c:07:2f:
9d:bb:bf:59:bd:58:1c:d9:ae:60:f1:08:fc:cd:7d:
e5:8e:a6:e3:4a:93:6b:91:68:15:8b:c9:96:01:66:
58:f3:20:7a:6d:b4:80:cb:c6:d9:f4:5a:00:00:8e:
65:32:d4:bb:44:42:f1:ac:5a:fb:02:50:96:6e:4c:
71:d0:8c:f7:d8:5f:b4:89:bb:e0:56:c4:b5:e9:8d:
70:d9:de:04:90:ca:59:43:8f:73:54:2d:50:81:11:
d0:e2:a4:45:26:65:5b:99:43:8d:49:fe:3c:3d:37:
21:1a:d3:e6:d1:28:d0:64:26:aa:28:b9:5f:e4:0c:
d4:8b:be:c4:13:45:ba:37:24:78:da:a7:16:0f:61:
0f:2d:a7:a3:84:9a:dc:62:37:0b:6c:73:b0:51:c2:
de:8b:e8:1c:73:a8:63:2e:f9:22:74:f6:de:94:3f:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:76:37:28:68:66:D0:AD:5D:FA:79:69:A2:5C:6A:1F:35:61:C7
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:7b:51:08:6f:71:d6:f9:45:c0:ec:a7:99:40:d4:29:fe:
b1:39:54:14:84:1a:65:1f:af:34:74:6b:bd:f6:a5:51:0f:5b:
94:63:42:bf:80:05:fc:24:ab:9c:33:36:5e:8a:f5:26:c0:8d:
3b:be:6a:41:f6:3b:19:17:a5:01:e3:77:04:12:b6:a4:eb:50:
65:0d:ea:27:67:be:29:b3:aa:59:d5:12:04:33:ab:5a:ec:b7:
29:ba:cc:32:30:ec:d7:e1:4c:28:16:0f:aa:15:a7:26:d1:06:
27:d7:91:dd:6b:6b:c2:b0:e1:27:6c:a4:ba:0e:cf:db:0a:5c:
0c:ee:88:9e:22:9f:71:ee:dd:3b:1a:ae:80:3f:cb:48:83:4f:
f9:9d:6d:02:88:90:14:13:59:e5:bd:30:4e:3d:a0:b0:6c:06:
8e:40:06:90:2c:4e:c7:8d:d0:48:bd:14:0b:33:67:e7:61:b8:
ec:bf:bc:53:64:85:a1:6e:0b:7a:61:32:15:0c:88:8a:b4:d2:
da:97:1d:f7:f5:d6:b8:44:8e:84:61:b6:dd:f2:d4:70:dd:b8:
f2:1f:60:9e:ac:54:99:ae:af:6a:09:d8:4b:db:44:ce:31:a7:
07:c4:18:2c:e3:b6:6b:97:4d:07:52:13:de:72:c1:3d:3c:45:
3d:f0:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:08 2025 by rpki-client