Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: F8ldcZYXe/hVIV9c2rDDSJYfTln1TYRBoJt56cRb+BM=
Subject key identifier: C8:80:A2:87:3B:11:34:3E:E7:2D:C7:AE:88:62:12:C0:7F:3B:0B:37
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 01984B540BD9B1469679C0661DC08C5E93F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 0690
Signing time: Sun 27 Jul 2025 10:00:55 +0000
Manifest this update: Sun 27 Jul 2025 10:00:55 +0000
Manifest next update: Mon 28 Jul 2025 10:00:55 +0000
Files and hashes: 1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: tfJW35fWfa2vAVflZlPneyyX0/mSc6KuP2cf77/uDko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:0b:d9:b1:46:96:79:c0:66:1d:c0:8c:5e:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Jul 27 10:00:55 2025 GMT
Not After : Jul 28 10:00:55 2025 GMT
Subject: CN=c880a2873b11343ee72dc7ae886212c07f3b0b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:7f:64:05:35:4b:ad:c6:58:0c:7f:56:be:
8d:f1:d0:fd:1a:67:a7:a1:5f:d0:9c:57:d9:01:97:
f8:f9:96:f0:62:d2:b5:ac:97:84:70:09:a9:63:c0:
d2:c6:d4:6c:95:47:e4:7f:d5:f1:6c:3e:fe:a7:fc:
b8:a7:a7:44:cd:b7:90:1a:a6:63:d1:32:60:bc:17:
23:c2:d4:4e:1b:aa:53:5d:85:00:44:68:5f:3c:f6:
ba:be:41:8f:6d:4b:f2:ed:00:5f:e9:6f:5e:e5:b8:
df:c6:23:b0:35:8f:6c:16:b5:89:9c:6e:b9:f9:52:
b0:c7:bf:6b:ed:27:79:6f:c9:2d:2d:55:57:49:a0:
2b:e6:c7:1b:8d:d4:7b:03:59:74:2e:2c:1e:20:3c:
b1:c9:36:d0:6a:09:a5:59:2d:cd:34:bc:e4:43:e3:
71:55:0c:6c:95:2a:b2:55:84:40:04:a9:bf:c8:3f:
f6:6c:52:de:40:c4:1f:c3:18:c0:1a:1f:47:a6:4b:
53:b2:8e:9e:67:8a:5d:59:f3:1a:b5:99:2c:0d:46:
d9:46:03:58:ca:13:49:88:de:f0:29:25:ba:b9:14:
aa:bf:b4:8e:49:6a:31:e5:9d:fb:8d:32:f4:83:ba:
48:c9:8b:97:18:2c:3a:93:2e:6a:77:51:e3:9b:4c:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:A2:87:3B:11:34:3E:E7:2D:C7:AE:88:62:12:C0:7F:3B:0B:37
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:5b:ff:10:68:5f:e2:2c:61:ff:c3:39:a9:f7:0a:67:4f:
78:ab:4a:cf:4f:8a:cf:02:40:fd:14:55:79:53:ad:31:f1:49:
26:17:65:31:f8:17:45:82:92:ff:4b:de:f6:0a:e7:2c:11:21:
c3:95:58:47:03:51:32:32:0a:f5:ff:49:63:8f:68:be:7a:79:
ef:23:37:0d:f4:02:ae:56:98:55:7c:92:99:86:a9:bf:4b:c6:
08:77:dc:08:e7:ea:7e:6d:0a:b2:c4:ca:31:d1:1b:ce:96:4d:
88:1f:93:5c:16:9b:5a:70:48:99:07:65:e9:2e:fb:07:44:bd:
2f:61:3e:8b:11:88:a2:9f:1e:0b:12:62:b9:a5:f6:fc:70:88:
89:29:a2:89:6b:cc:71:94:ca:44:49:8c:58:fd:7d:f9:a0:62:
e1:12:9b:1a:ec:10:7d:5a:40:a5:15:d6:cd:45:4f:a8:c9:f9:
cf:73:ab:db:ca:eb:21:34:4a:39:af:38:2f:e6:f7:05:89:cf:
33:35:17:8c:fa:c9:52:22:39:a6:ac:21:75:00:55:41:9b:1f:
d9:a4:7f:8d:17:fc:1b:28:83:ac:40:83:2a:a0:21:b1:09:88:
ff:4b:61:e3:f4:44:16:59:b4:12:1c:3f:72:5c:cf:93:22:32:
09:a7:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:42:27 2025 by rpki-client