Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: T5zXpmRdST3/LW/bBtuAeVaM4VWvKhQqj0ntAmxjHgQ=
Subject key identifier: 79:CB:FA:F3:89:CE:D7:2D:0A:24:D4:3D:44:FD:7C:EA:B4:99:D6:09
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0198383A5C0CC539B36BDD559237C452AAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 09C1
Signing time: Wed 23 Jul 2025 17:00:05 +0000
Manifest this update: Wed 23 Jul 2025 17:00:05 +0000
Manifest next update: Thu 24 Jul 2025 17:00:05 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: hNkG/U84SnjUm4Awkm2E5ThTUaRVioBwCWdJUw3009g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:5c:0c:c5:39:b3:6b:dd:55:92:37:c4:52:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jul 23 17:00:05 2025 GMT
Not After : Jul 24 17:00:05 2025 GMT
Subject: CN=79cbfaf389ced72d0a24d43d44fd7ceab499d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:0c:50:b0:45:a4:5c:02:94:d2:86:00:ba:
fb:1e:fb:b1:37:f1:a8:a9:1e:c9:2e:7a:1b:4b:25:
0f:db:d3:04:75:77:37:46:a1:75:36:58:0b:67:26:
03:e1:75:05:5c:75:02:4c:1e:26:22:ea:84:b5:81:
27:0b:a9:fe:37:94:a1:f1:58:95:76:d3:80:f0:15:
24:96:b7:51:5d:42:d4:aa:f2:76:bb:ac:7d:33:6f:
4c:a5:b6:15:07:15:bd:79:9b:31:92:e0:31:18:16:
89:e2:79:51:68:dd:87:3e:0f:31:a3:c4:c5:0b:ae:
39:a8:c2:2f:39:ce:12:5a:91:f6:d8:54:e2:8a:fa:
c2:b6:c0:8b:dd:2c:c6:27:1e:3e:de:8f:d5:19:73:
c7:c3:a1:e8:01:e9:e9:a8:e5:9c:f7:9e:60:3b:50:
25:eb:b2:28:19:07:a4:a7:b4:54:3b:32:1b:98:93:
22:dd:8b:6d:03:7d:8a:92:d8:ec:85:e5:3d:d1:aa:
a7:e2:2b:3f:1f:22:3a:de:94:a6:b8:27:9c:1b:f3:
c6:e8:1f:70:49:4d:65:fd:5e:b0:e0:36:99:08:f2:
69:fd:de:41:c4:2a:a1:de:fa:ef:5f:b8:d2:7e:92:
15:00:aa:ec:7d:f8:6e:f0:b4:7f:38:48:d8:fe:10:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:FA:F3:89:CE:D7:2D:0A:24:D4:3D:44:FD:7C:EA:B4:99:D6:09
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:02:d1:b2:70:f3:fb:bd:96:33:82:33:43:e7:05:40:5e:
d7:11:d6:59:5f:a9:1f:b4:62:93:32:36:4e:3e:e3:73:32:e1:
83:ce:48:0e:b8:ff:1c:82:ca:81:20:57:5f:6b:a6:72:0c:bb:
bf:62:3f:cf:da:e3:24:17:3f:d9:85:f0:30:de:fb:29:61:26:
82:1b:06:ed:bb:f6:ee:16:b5:d5:2d:e7:ef:7a:8b:7b:29:4a:
70:c0:92:ab:09:9c:dd:0f:0e:db:d0:17:ef:2f:30:3b:e9:17:
d1:18:5e:5e:98:e0:bd:45:40:d5:5f:1f:0d:a8:c5:37:61:41:
4b:1b:16:62:65:0f:8b:55:30:60:8c:16:85:ec:f8:06:d3:23:
fb:a2:7b:8d:d2:db:e1:95:a5:76:a4:e0:86:1c:0d:4d:69:d8:
b4:15:14:14:1d:51:cc:3f:49:1d:a7:3e:67:32:ba:83:fd:f3:
a6:58:4f:65:4b:e8:12:88:21:97:e6:f4:6e:86:1a:04:0e:c1:
5f:5f:82:ae:6c:18:04:7b:b7:9e:79:ad:bf:db:f3:49:66:38:
ba:ec:ed:6a:33:4e:87:28:f1:09:21:91:38:9a:94:75:fd:21:
b0:fe:29:42:33:a7:a0:f6:1a:33:f7:21:2c:73:2b:93:83:d6:
51:d8:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:35:44 2025 by rpki-client