Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: lILtIC/3i8zLT5D09QndHPG3yF7yv4O1z/W17kylrfY=
Subject key identifier: 28:FF:C9:04:FA:55:45:18:9F:E3:59:15:23:55:CC:91:4A:30:AB:A8
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 0197B77CB22BFC0127783C641AE321210F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 1584
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: Ncc1D9o3FjPLr4C0hu5ZAbajyKfAhmwR9mHFoMJD6uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b2:2b:fc:01:27:78:3c:64:1a:e3:21:21:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=28ffc904fa5545189fe359152355cc914a30aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:de:b5:38:36:a8:20:f3:9f:36:c0:c1:04:
61:ae:d0:22:a1:fa:dd:61:50:ee:3a:9d:94:dc:d9:
e6:2c:5d:91:5f:3e:ae:9f:af:e2:ca:58:cc:31:1b:
78:cc:c2:69:db:fb:d1:f4:f3:b3:31:26:19:cb:50:
9b:83:90:0f:89:d5:7d:c4:b0:db:4d:3a:e9:8d:01:
f2:47:8c:ef:76:23:ac:8a:24:a3:90:0b:38:5c:8d:
bd:96:47:66:3b:29:4e:36:92:84:84:74:fb:e6:f2:
8a:03:66:44:61:d5:0c:89:c3:95:55:48:ae:b6:2f:
18:3f:1c:ec:4f:0f:d7:ea:da:08:ff:17:b7:c2:f0:
e5:06:f5:39:29:89:5d:31:e1:55:a7:96:0b:a0:c1:
de:c2:e8:1d:f3:62:d7:98:38:89:16:bf:c3:78:ad:
21:00:5b:64:92:02:14:38:49:48:d8:c4:20:68:c4:
91:53:99:26:03:3f:d2:f2:8b:e6:cc:a6:9a:c5:94:
a7:b7:b7:1b:b5:3b:ae:70:65:3c:32:3b:3e:c9:7b:
12:9c:52:01:8d:72:50:f7:ab:a2:29:e8:ce:42:5b:
24:46:0d:a2:0c:8f:7d:ad:a3:4b:18:76:bf:f2:41:
0e:4b:6a:cd:44:9d:6d:3a:15:52:d5:b9:47:bf:c5:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:C9:04:FA:55:45:18:9F:E3:59:15:23:55:CC:91:4A:30:AB:A8
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:01:fa:dd:24:8d:90:4c:a6:bc:3c:bd:1a:92:3b:cd:08:
fe:45:cd:57:0a:76:d5:3b:37:64:80:f5:33:3c:94:5e:82:36:
d8:ec:2c:15:97:9d:48:a6:2f:07:0d:b0:cf:96:2d:b7:f6:84:
5c:32:80:f5:bb:7d:ed:51:67:de:f0:88:74:91:fc:64:0f:88:
f2:0b:37:46:14:0e:ac:5b:0e:85:4e:e3:22:ce:a8:6c:e8:1e:
3b:5c:a0:a9:51:92:93:b3:50:ea:b6:33:47:35:81:98:55:a5:
b9:50:a1:f4:1c:f6:b2:e0:f7:e9:3c:01:d7:a4:fe:45:c5:41:
01:e8:7e:2f:02:1f:cd:8e:a2:b3:18:3c:0f:7a:57:f3:dd:e9:
0c:00:62:0b:7c:09:c4:b2:02:f3:c7:85:56:01:33:44:f5:9b:
03:7f:f3:2b:de:2b:69:73:31:5e:e9:67:87:69:7d:b1:75:b2:
f0:f8:66:d1:43:47:05:2f:72:a5:b9:94:f2:e8:96:96:ba:b4:
a1:77:ba:b0:f2:06:63:b3:3b:b8:43:8a:5f:1f:eb:ec:35:19:
0c:b9:28:0a:f7:2b:7d:c9:e6:35:24:ea:45:8d:4e:40:ef:d2:
2f:29:3f:06:43:e1:fc:d6:7c:16:ff:49:70:19:8a:61:74:02:
f2:6f:de:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:42 2025 by rpki-client