Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 4DNdFh2FL4OXVackOwzURUpCp0uAcemj+FMkqQlHE1g=
Subject key identifier: DE:1A:F8:EE:B1:0C:72:C9:48:F8:49:E8:D5:95:CF:33:37:78:2F:A6
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0198383AECA9777F06B43A0958ED6BD496A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0E6D
Signing time: Wed 23 Jul 2025 17:00:42 +0000
Manifest this update: Wed 23 Jul 2025 17:00:42 +0000
Manifest next update: Thu 24 Jul 2025 17:00:42 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: +ahpg7X8SN6pN1oCXZWnRi+IX3gZBPO9+j2UXhAuHTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:ec:a9:77:7f:06:b4:3a:09:58:ed:6b:d4:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jul 23 17:00:42 2025 GMT
Not After : Jul 24 17:00:42 2025 GMT
Subject: CN=de1af8eeb10c72c948f849e8d595cf3337782fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:fa:41:46:2d:10:b5:2a:67:1e:4e:24:e3:
00:3c:ce:75:b6:e8:ca:bb:61:17:1b:be:cc:78:cb:
bc:a9:ee:5a:46:b4:87:64:20:2f:11:10:a5:cf:54:
cf:22:bb:d7:35:09:c5:3d:0f:5c:9a:3f:7f:c5:57:
1c:e6:9e:8e:80:e1:4e:a0:f3:62:1d:44:06:64:03:
2f:60:6b:4d:d4:4f:2a:1f:30:f3:d9:dc:84:dc:14:
ed:78:a9:92:74:89:64:25:3f:b9:2c:53:b6:0b:98:
59:4c:f9:b3:0d:95:b1:23:c0:c6:44:84:8b:b4:91:
df:db:ab:fd:20:6a:d0:66:55:e6:6b:0f:a7:5c:6a:
be:98:75:a1:c7:96:ea:99:10:e5:82:4d:d1:c6:cc:
07:08:34:f7:58:bf:1a:b1:5e:6e:e7:11:6b:6d:47:
dc:3f:cf:ac:0a:4b:46:d0:73:a2:f9:b0:f9:83:c4:
2d:c2:ee:04:a1:4c:c4:d7:bd:5a:f2:64:80:5f:eb:
24:e5:da:b1:68:80:82:60:69:ec:24:1d:5b:e6:0c:
af:02:a5:f4:32:21:b4:ae:d9:76:fd:6c:de:68:57:
91:c9:f4:f4:8b:38:2e:65:e2:24:f5:57:b9:c4:f4:
d6:77:ae:c7:09:0c:3d:2a:e7:48:9e:8c:05:bb:ff:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:F8:EE:B1:0C:72:C9:48:F8:49:E8:D5:95:CF:33:37:78:2F:A6
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:3f:ca:a0:96:a5:75:6e:c9:71:d3:ac:2a:93:6e:f3:21:
68:c4:7a:f6:bb:9d:42:1f:16:50:e0:8d:d3:99:7e:11:8f:7a:
f9:22:4e:67:d7:94:39:ef:88:60:ba:5b:32:de:fe:83:d7:fa:
ed:9d:df:70:2d:7d:3c:7b:67:2b:f2:10:33:91:11:95:be:d2:
58:29:96:0c:6a:f0:05:ae:14:2d:ef:02:73:d1:0e:a6:8d:bd:
8f:65:ee:d8:0f:5f:83:0b:38:d6:f2:84:71:85:38:47:03:28:
95:1b:e3:b7:b4:44:0d:c1:e6:34:67:fa:8d:fc:2b:ee:57:f2:
b5:b8:86:1a:d3:69:19:98:5b:16:59:3b:20:40:c3:88:c0:0f:
02:cf:e9:d2:ea:73:10:fe:96:d1:fc:33:75:77:fc:07:02:70:
b1:96:6b:1f:34:51:3d:96:b8:92:78:51:4a:90:09:99:11:52:
07:39:bb:7b:6c:4a:38:16:b1:34:3d:71:31:b4:ec:d5:86:03:
2e:a5:cf:09:44:f4:0a:8d:b9:40:cb:28:55:75:74:93:b7:4f:
91:bd:12:84:93:e5:32:b7:d5:17:86:4d:85:61:b5:73:f9:79:
03:e8:2f:30:20:3b:4a:90:65:b1:6f:95:7d:ad:44:79:77:8b:
af:ff:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:40:15 2025 by rpki-client