Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: uGOEWLY/od8ZANNzUgHprIba8Z9UsyfHXBsG/PI6rl0=
Subject key identifier: B8:D8:99:C3:76:88:BB:63:FE:E5:5B:55:5A:A2:43:F2:B8:2D:27:14
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 01974779D20D1124682DECCF99E293869845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:55 +0000
Manifest this update: Fri 06 Jun 2025 23:00:55 +0000
Manifest next update: Sat 07 Jun 2025 23:00:55 +0000
Files and hashes: 1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: LiP68WFnIrYRW9Vn1rmSGTPyIvNrIfnl3PtdpUmCoWA=)
3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d2:0d:11:24:68:2d:ec:cf:99:e2:93:86:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Jun 6 23:00:55 2025 GMT
Not After : Jun 7 23:00:55 2025 GMT
Subject: CN=b8d899c37688bb63fee55b555aa243f2b82d2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:f2:db:5c:55:e2:62:2a:69:30:75:ba:fb:
e3:2c:5b:07:4b:13:c0:0e:12:11:cc:d3:aa:f7:f6:
09:90:b7:5a:b8:44:93:05:6c:ee:a9:d7:77:7d:d4:
ff:cb:bd:51:92:ac:df:e7:f6:6f:d6:b3:16:70:cd:
76:a4:34:3a:31:06:0a:18:06:1d:4c:b0:e0:a5:bc:
8a:db:b0:12:35:81:ed:cc:37:c8:4e:28:87:6f:56:
a7:38:10:0b:4e:4c:8d:99:81:b7:67:53:a7:dc:0f:
57:e7:c1:7a:a3:da:ac:ff:f8:5f:a5:89:b7:aa:aa:
ff:36:9d:70:aa:aa:1e:dc:cb:47:fc:6f:4c:a0:f9:
73:16:7e:b3:d8:ea:b2:a6:a4:95:e2:e3:cf:77:4a:
84:09:3c:89:0a:83:2f:d4:d9:bc:76:44:cf:73:c6:
d1:ce:12:ac:f4:b0:5c:61:07:79:5f:62:74:f9:4c:
f7:6f:d6:c4:cf:8a:df:fe:eb:b6:31:ff:47:0c:83:
e9:b4:71:16:cb:73:f8:83:de:f0:fc:1d:3e:34:86:
79:74:d9:ee:b9:db:7f:fc:6c:bc:04:7b:c7:2d:e8:
8c:4c:96:c8:f4:23:30:87:8a:18:63:be:b9:97:c3:
92:63:1b:a6:9a:6d:eb:7f:78:75:e6:93:07:71:1a:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:99:C3:76:88:BB:63:FE:E5:5B:55:5A:A2:43:F2:B8:2D:27:14
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:65:7d:98:94:56:a6:a2:81:1b:91:c1:a2:a2:60:05:36:ce:
eb:9c:af:55:16:0c:c5:18:76:38:74:98:88:6e:b2:0e:a0:e4:
c3:88:74:55:7a:7c:18:1e:e2:9a:7c:9d:de:99:10:ec:b1:52:
75:78:46:93:08:01:24:6d:4d:6c:af:a7:6c:9a:65:a9:ee:d0:
80:5f:86:54:1a:88:0f:cf:e0:39:6b:54:44:06:f6:32:9f:08:
17:4d:c9:53:5b:f5:ee:d9:36:3f:91:15:3c:0e:f9:9f:43:6e:
44:f9:ae:9c:e2:e0:20:6c:fa:84:39:fa:92:94:d7:c0:1e:52:
99:a8:6c:12:b0:96:99:08:af:3c:2d:0a:85:79:b8:5f:7f:6e:
a9:9d:63:64:ee:2d:64:1a:9c:09:5b:3c:a7:37:4f:a0:11:15:
39:9a:89:51:86:7c:09:4e:a8:c2:7b:0f:0c:8e:79:02:ac:8c:
05:b1:f6:d7:e4:b4:2c:1b:bf:5a:25:35:77:be:c9:dd:1b:f7:
b1:3b:d7:66:30:f6:67:9b:76:af:c9:ca:cf:72:e4:58:2f:74:
39:60:f3:ff:aa:01:00:22:85:c6:00:61:23:9f:60:f9:8d:c1:
51:14:ed:eb:32:21:26:45:b8:14:92:bc:33:ee:3c:4f:2e:49:
6a:6e:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:18 2025 by rpki-client