Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: UAN5AVM12MvxXRaCEw42emnWS1kn8Vplkyt+PmwP8Co=
Subject key identifier: CA:CE:4E:59:F0:9C:B8:65:52:48:D2:46:6C:FC:A0:DD:A1:F0:DA:1E
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0197402DFE5F2A90D0F50AC86D6BFF4A32B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0CD2
Signing time: Thu 05 Jun 2025 13:00:45 +0000
Manifest this update: Thu 05 Jun 2025 13:00:45 +0000
Manifest next update: Fri 06 Jun 2025 13:00:45 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: ZlTKslJ3X/sGBeFxqVEuStfrRbd7h5NGh5cKmsxhW1o=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:2d:fe:5f:2a:90:d0:f5:0a:c8:6d:6b:ff:4a:32:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jun 5 13:00:45 2025 GMT
Not After : Jun 6 13:00:45 2025 GMT
Subject: CN=cace4e59f09cb8655248d2466cfca0dda1f0da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:59:55:79:3b:6c:ec:19:59:83:d4:72:f0:
58:29:ce:8e:d3:8f:9f:88:d1:f4:56:c9:7f:3e:f9:
84:f5:d7:8c:96:cc:ca:4f:06:84:d4:50:46:d3:1d:
73:3f:ec:10:1d:34:82:46:a1:8a:53:bf:70:f3:53:
43:13:c8:20:8e:cf:59:f7:07:8e:00:18:5c:5d:43:
08:7a:c0:ad:1d:da:47:68:9d:b4:d5:eb:10:51:fb:
2f:28:30:0a:42:ac:05:f4:30:6c:e8:d5:4f:0d:80:
fb:66:76:a4:2b:ba:81:22:e0:4d:ab:f6:67:0b:6f:
81:3d:f1:77:d0:b1:ba:c3:34:c1:04:58:b9:3a:45:
76:65:34:19:2a:06:55:17:23:cd:39:de:85:12:b8:
ce:ab:48:ca:ba:73:85:66:e2:27:ab:3c:7f:0c:07:
dc:93:71:b7:91:e6:cc:4f:a0:a7:6e:5c:4e:2b:5a:
94:b1:32:4c:ff:5c:b6:8b:98:6a:ad:8c:18:b3:6f:
d5:6f:b8:3f:f3:65:9a:6e:76:61:5e:a9:18:70:f7:
c2:aa:db:9d:0e:f9:a8:23:ac:96:14:e3:c4:26:ee:
c8:b3:10:9e:8b:d1:e1:4a:58:d4:34:3e:91:25:3a:
7b:14:77:7b:bd:a7:b5:27:df:ab:5c:a8:d4:fc:fe:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:4E:59:F0:9C:B8:65:52:48:D2:46:6C:FC:A0:DD:A1:F0:DA:1E
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:a0:1f:2c:b7:fd:a3:f7:ee:5f:43:9e:ab:c1:f1:51:23:
ef:76:10:99:39:36:66:40:db:97:f2:37:ef:f0:48:02:3e:e0:
e8:75:b0:b8:75:9a:e9:3a:f0:8e:af:09:9a:b5:d6:aa:dd:54:
9e:47:50:52:15:09:f9:19:18:5d:e4:b2:65:ea:b3:4d:60:83:
e7:26:aa:e7:05:d8:55:ab:6b:f9:fd:bc:6b:c4:58:f6:2f:e8:
8e:6b:9a:64:dc:0d:1a:a9:95:f0:c0:2b:d3:ac:99:b6:da:23:
da:1c:64:cd:91:2d:60:5a:42:33:b8:17:be:c0:3d:d5:1f:74:
ec:c7:d3:33:7c:04:fd:ae:47:84:fc:a8:66:7b:da:1e:76:94:
56:99:0b:c3:86:85:7b:d7:c0:ba:03:5d:3f:86:bd:2a:3c:90:
b5:6a:32:61:82:9d:34:3f:fc:31:97:34:6f:e4:8f:ab:16:37:
dc:63:69:7d:c8:bf:76:99:b0:cd:8f:c0:ed:07:df:9f:f7:fc:
94:01:a4:5a:f8:39:2c:d1:c5:2f:58:da:1e:bc:93:85:2e:30:
77:c6:a9:c8:e4:a0:94:96:4d:f1:40:1a:a0:40:d0:81:85:1c:
c2:3d:7b:0c:ba:15:2a:61:83:f7:46:02:10:af:f6:57:ff:9b:
2d:07:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:59 2025 by rpki-client