Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: 16Wq4EAxV6uNGj4ASlkMTJ+9eNBDGNZ8CEM/WqG6TaU=
Subject key identifier: DA:E8:CB:2F:FA:70:D4:FF:B1:BE:02:27:BC:A3:35:28:45:56:F6:FC
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01974967F977553075C44CC08CA774A47B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0255
Signing time: Sat 07 Jun 2025 08:00:40 +0000
Manifest this update: Sat 07 Jun 2025 08:00:40 +0000
Manifest next update: Sun 08 Jun 2025 08:00:40 +0000
Files and hashes: 1: 6WkW36jTYe2NbWKlbgyh5NLn5uI.roa (hash: tLiFhdBUsTLBH4rpnV4d0AYNn/zImDkxbViuw5IBI/8=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: r8OoLOyhLBp9Jf8M9mWjTgZ8+fGqh5UhRGoRka/YFNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f9:77:55:30:75:c4:4c:c0:8c:a7:74:a4:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jun 7 08:00:40 2025 GMT
Not After : Jun 8 08:00:40 2025 GMT
Subject: CN=dae8cb2ffa70d4ffb1be0227bca335284556f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:a9:1e:61:f0:fd:ac:11:9c:45:e2:49:8a:
52:95:6e:d1:9a:a9:8d:a7:56:29:7c:c3:eb:b0:6c:
9e:b2:21:bb:f8:33:b3:ac:67:b3:55:fd:28:74:6c:
12:ba:78:b9:50:5e:ab:02:72:7e:ce:72:c4:cd:ca:
db:74:ad:8e:59:3f:0c:d8:ae:72:f4:dd:d5:8e:04:
fd:81:43:3d:c7:57:3c:43:7d:ae:67:1a:25:1c:ec:
1a:74:78:b0:29:fc:7e:1c:b3:6a:52:ee:3d:75:e5:
b7:44:91:a7:be:b0:85:d7:30:5c:30:18:30:21:24:
e5:9d:c1:d4:81:e5:d5:20:c9:db:f0:8a:4c:be:c0:
b3:42:47:8f:6b:06:06:f5:a5:87:9e:be:be:3b:22:
8c:b5:e5:e6:91:b6:d2:42:1c:ec:41:30:86:c8:4f:
4c:f0:4a:52:d9:21:d0:f7:2b:e4:c0:7d:6e:8c:b0:
51:b3:72:88:01:a6:28:bb:f9:1a:e6:64:e4:e1:2c:
b9:7f:1a:1c:40:bb:21:9c:25:1e:13:ce:ad:b5:c6:
be:0f:c2:3d:59:2d:50:ed:77:36:75:89:0f:9f:cf:
4f:af:9f:29:4b:90:1f:dc:43:af:50:d8:81:da:7e:
b9:1a:fc:a8:4e:c8:cf:24:e5:40:10:2e:35:f9:84:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:CB:2F:FA:70:D4:FF:B1:BE:02:27:BC:A3:35:28:45:56:F6:FC
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:c0:d5:2e:b8:78:98:d4:7b:4c:dd:38:ac:93:a9:52:75:
22:da:d5:b0:a1:16:e0:b8:e2:aa:85:db:f2:06:7a:21:8f:3a:
05:4b:59:18:01:56:a4:36:7c:93:94:cf:d3:d5:d2:91:62:04:
08:48:78:7d:a7:d1:c5:74:fe:f7:b1:a6:23:53:ef:c2:0c:08:
03:c7:36:69:de:e3:50:8d:2b:d5:96:f1:41:67:f9:e2:74:46:
ba:63:bb:da:7e:76:53:f7:40:8f:9f:7f:6e:a3:2e:ea:73:dc:
05:28:b9:cd:d4:79:b5:fb:f6:6b:45:01:bf:ff:eb:1b:d1:8b:
3a:00:e1:d4:c7:0d:53:25:94:71:76:18:d2:c7:21:bf:75:d4:
b2:66:76:66:8d:59:2c:8a:0d:01:1b:90:df:49:b1:3d:10:e6:
0f:75:b2:7b:99:a9:95:66:81:5c:29:66:99:f9:96:93:8d:b7:
28:b7:6b:22:83:86:a3:96:b1:48:7b:dc:3d:9f:7f:cf:1b:59:
10:f9:52:93:01:1d:9f:01:fb:79:4a:53:f3:19:d7:98:5c:96:
d5:e9:2e:64:69:a6:03:33:a4:39:96:c2:58:2c:5f:cf:3b:d0:
65:1a:3b:dd:ab:92:62:26:3f:3c:4d:6b:04:94:27:0d:9c:cb:
81:27:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:03 2025 by rpki-client