Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: +L0CZ48tKY65FNdPzXASSXKC3JDp4JctbNoNRCS7yq4=
Subject key identifier: AB:8E:E6:BC:AC:26:DA:2B:C2:96:95:BD:9C:5F:55:6F:AF:40:A9:30
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 01974AB18706E4046DE15C7B2644844F982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1459
Signing time: Sat 07 Jun 2025 14:00:37 +0000
Manifest this update: Sat 07 Jun 2025 14:00:37 +0000
Manifest next update: Sun 08 Jun 2025 14:00:37 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: UWXVNDEe6oqvObmV08TWFSuw/yaTyYJVu929Y62Bqm0=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:87:06:e4:04:6d:e1:5c:7b:26:44:84:4f:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jun 7 14:00:37 2025 GMT
Not After : Jun 8 14:00:37 2025 GMT
Subject: CN=ab8ee6bcac26da2bc29695bd9c5f556faf40a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:f3:b4:f8:42:78:00:80:b1:07:6a:e5:bb:
e5:be:10:23:b7:c0:9f:2c:7f:4d:a1:b7:18:a3:53:
74:e8:31:58:f1:85:b1:42:77:c8:3b:a8:ba:c0:df:
bc:f7:57:04:ac:2b:fe:82:c0:3a:12:87:b4:10:1f:
2b:dc:0d:ab:7a:33:24:3f:fa:ea:c4:bf:c0:69:ae:
b5:0e:51:5f:2d:26:93:e0:49:bc:c1:55:1f:ef:dd:
07:97:60:4f:34:d2:d5:1a:d2:98:e1:64:86:90:68:
11:57:fa:29:d1:33:99:92:25:27:cf:63:4e:b3:14:
79:63:1e:48:c5:ab:8b:f2:bf:8a:7e:82:1c:a5:58:
2a:2f:23:1e:5a:4b:30:f3:f9:1d:c5:2a:f6:76:ea:
92:a0:4f:6a:0e:c4:fb:8f:88:ef:df:74:88:dc:b1:
80:bf:9e:52:bd:a6:03:e2:ab:31:0b:50:b1:61:e2:
f3:0d:7c:84:5f:f4:4c:f4:77:84:6c:8f:9a:fe:6d:
c9:d9:7a:c5:db:5b:6a:6b:14:0d:91:01:ec:85:a8:
48:bc:ef:78:e2:8f:28:8b:bc:db:71:8a:dd:85:5f:
36:e5:80:5e:6e:49:ba:f9:1a:18:9b:d7:64:80:4f:
43:0d:f4:97:e9:70:99:54:b3:e3:95:f7:29:d2:7f:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:E6:BC:AC:26:DA:2B:C2:96:95:BD:9C:5F:55:6F:AF:40:A9:30
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:55:81:2e:8b:dd:11:8e:a6:c6:8e:3d:e2:39:75:19:4a:
89:b1:ca:3c:69:e5:e9:2e:14:ce:38:70:ce:61:93:68:91:2d:
5c:93:59:3d:83:52:fd:09:2b:b5:d0:23:43:7f:a9:c2:0e:7b:
03:14:ff:0d:2c:5f:dd:f0:a6:bd:e2:6c:b2:04:bf:ce:92:e7:
40:55:9e:65:a8:10:b1:71:4c:c1:01:86:e3:9d:e8:96:20:38:
79:d7:bd:5b:de:8c:49:64:7d:e0:9f:47:c7:63:41:a2:30:96:
b1:9c:7c:23:f2:b6:ad:af:d0:37:29:59:de:7c:ff:ff:80:3a:
88:35:68:18:c3:25:55:39:54:c1:08:65:89:86:9d:74:fa:7e:
63:69:27:d7:37:94:0b:c8:23:36:9c:04:c3:44:73:66:6e:e8:
fd:00:79:5e:dc:a7:f4:0b:51:d2:2c:eb:3e:19:f3:5d:2c:68:
05:a3:e8:79:6f:a3:47:80:a1:d7:de:56:bf:82:2f:b7:cf:e3:
f3:06:65:9c:86:2d:31:65:06:4c:87:7c:d8:a3:4c:28:fb:b2:
36:69:a9:3b:1a:61:43:b2:87:21:2a:d4:5f:07:70:09:f6:01:
c2:e9:9e:e8:c8:5a:8e:70:a1:4c:6f:e5:72:ea:ba:14:f2:13:
1d:01:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:51 2025 by rpki-client