Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File: RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier: lGFf052WlmZqFXie0aZr38PtEZUOEbRa7BUUVYcreJM=
Subject key identifier: 49:B7:23:17:62:88:74:71:72:86:B8:9E:A3:E6:99:6C:F3:E1:91:64
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial: 0197B5C5291DADDF3BF86EE0DF1AC3E253ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=)
2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: 4E0cCN30WS0sM/wLZTzcedommgepXCdpVzvbZdhxHuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:29:1d:ad:df:3b:f8:6e:e0:df:1a:c3:e2:53:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=49b72317628874717286b89ea3e6996cf3e19164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:6b:92:5a:da:96:f4:57:1a:a5:2f:3e:88:
17:f8:b2:34:68:27:41:6b:fd:5e:0b:58:7d:d4:77:
7a:89:6b:60:af:8d:30:49:16:11:d3:52:4b:3a:0e:
eb:ff:c1:55:36:76:97:a2:5e:12:00:e7:81:cd:73:
a8:c5:41:18:c8:2f:22:00:f7:fd:57:61:f0:0e:e8:
c7:8b:23:41:7d:61:b5:3a:e7:78:c6:04:89:e5:25:
a8:c1:49:0e:44:d9:e6:c1:aa:6b:00:5d:3c:29:12:
8d:61:91:6e:f9:bd:92:0e:c8:e2:8e:05:d9:8f:68:
05:f6:9e:e4:a4:0a:c9:de:97:1c:8c:ea:5a:1b:17:
d2:89:07:ff:19:61:1a:b2:76:b6:ad:91:5a:e9:a1:
45:82:86:27:e9:66:2e:8d:41:14:2b:03:2d:af:60:
5a:37:b0:fd:47:77:f3:f0:8e:58:93:52:21:f5:2f:
ad:28:e2:e1:5e:3f:fe:0c:28:81:d3:ca:2e:6e:70:
7a:9e:12:19:31:70:f4:cd:b6:cf:b6:09:e7:e5:33:
ec:15:7c:97:77:0d:3c:cc:8e:a0:0a:8e:70:e7:5e:
77:9a:fc:e0:86:6c:03:84:db:80:27:aa:a7:98:99:
c9:4a:f3:69:52:9d:73:64:ad:f4:5e:5f:e6:34:bd:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:23:17:62:88:74:71:72:86:B8:9E:A3:E6:99:6C:F3:E1:91:64
X509v3 Authority Key Identifier:
keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:49:ad:0f:02:8b:b3:3e:1e:de:22:77:59:20:53:c8:2c:9e:
7c:c3:6f:5f:2c:df:e7:9f:df:01:a1:24:3c:50:8c:34:94:5d:
ef:e2:16:ff:e6:5d:fd:69:27:a2:17:e1:72:11:78:4d:7e:45:
0d:09:74:b3:43:99:03:39:49:0c:af:dc:67:f1:c8:1c:37:d4:
c4:fb:d8:01:87:08:e3:3a:17:8a:d7:71:2c:ae:5f:ee:07:b2:
6f:5b:24:75:ef:45:bf:08:f5:93:2b:a3:e6:21:3b:17:4c:50:
85:98:5a:c1:f7:9a:c6:23:d5:9c:af:53:53:91:b8:d3:7e:2b:
1b:bf:7a:b0:b5:4e:19:16:d1:a5:da:38:5a:75:5b:64:34:7f:
48:1e:3a:08:44:21:b2:4f:0a:a7:fa:ce:ca:4b:2c:86:11:3b:
72:78:e3:9a:04:d8:ca:ab:44:19:57:9f:72:be:17:97:e4:97:
37:c2:6e:76:80:36:8b:2e:12:fc:37:28:f2:c8:c9:ba:fd:a3:
f3:39:b4:3c:a8:ed:e5:9a:27:f9:05:b2:b8:c1:18:c1:a3:64:
95:7c:34:26:f0:1a:05:e2:7d:77:6f:b0:fc:09:55:4b:cc:f8:
31:62:ed:da:51:16:e2:c4:f2:85:6f:2d:d4:8d:68:d5:03:e8:
5e:39:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:39 2025 by rpki-client