Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: HJW+rNanqOzadiqvsMVKP2YbAX4kz/Hp52xB9zNO4No=
Subject key identifier: 3C:59:B5:C0:C5:97:A9:7B:BB:61:E8:77:91:B6:30:A1:41:E9:7C:29
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0197470BC2C79F7F1D8CCFB5ECEDD65FC82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 036A
Signing time: Fri 06 Jun 2025 21:00:42 +0000
Manifest this update: Fri 06 Jun 2025 21:00:42 +0000
Manifest next update: Sat 07 Jun 2025 21:00:42 +0000
Files and hashes: 1: L-gkzT_i4oHU7qxpuc0zJS-8-z8.roa (hash: HSMXzxBmRLzF1beqds20c9gNGv4tHZqGNf3E+15YX0k=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: +QRbln6K78ck6r8nOnYhif1FWHZVzA6auHq+dTOz9Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c2:c7:9f:7f:1d:8c:cf:b5:ec:ed:d6:5f:c8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jun 6 21:00:42 2025 GMT
Not After : Jun 7 21:00:42 2025 GMT
Subject: CN=3c59b5c0c597a97bbb61e87791b630a141e97c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:6a:b4:11:1b:dd:b2:a7:aa:95:49:a6:b1:
b4:bd:ba:b8:c6:a0:ae:90:d4:5b:c3:7d:18:e1:02:
2f:ad:42:c7:31:4b:bd:c2:cb:2b:68:2e:86:48:eb:
cb:55:c5:d1:8b:44:14:17:8e:6a:47:bd:12:b9:90:
fb:9a:d1:73:99:79:5b:7a:2a:6c:3d:29:1b:96:22:
04:4d:45:2f:6c:b5:53:4f:dd:a1:c6:75:d9:e7:71:
79:31:77:ea:8a:23:8c:ca:a5:65:58:8d:46:5a:d2:
32:26:86:ac:29:84:df:13:09:ee:61:9e:bf:07:2f:
6c:90:80:d5:62:08:09:97:97:01:f1:c8:c0:f1:cd:
0d:90:46:76:73:29:a7:97:1f:53:4d:de:34:a9:9f:
b7:af:ec:d2:33:e5:c4:03:04:5b:02:fb:a7:00:b4:
2e:aa:f0:2e:69:eb:dc:ae:67:09:42:bb:0d:f6:84:
06:d6:8e:dd:fa:ad:e1:08:fb:50:28:12:96:71:9a:
38:2d:ff:47:39:f8:52:10:1f:fb:95:f1:c3:b5:61:
4c:4a:bc:e3:63:e2:fc:58:18:3b:f6:83:a3:4a:11:
75:f5:81:c5:d5:23:c6:a4:91:56:0e:fb:69:5e:9b:
f4:fc:85:35:77:19:16:92:73:a9:6a:3d:22:cf:4d:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:B5:C0:C5:97:A9:7B:BB:61:E8:77:91:B6:30:A1:41:E9:7C:29
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:79:4f:4e:9b:fe:a9:32:c0:09:40:79:7b:78:24:57:ff:
c4:9b:4e:44:8f:56:b4:76:da:45:77:31:9f:0e:15:52:c0:f2:
00:a7:e4:0b:fe:1d:95:05:09:30:f0:3e:61:91:44:c7:bd:3a:
11:06:ee:c1:75:f0:1a:15:01:0f:5c:b0:dc:9e:73:d1:05:af:
91:fe:4e:68:ba:d7:cc:d8:9d:28:9e:b0:e0:1f:1c:71:51:e7:
45:ee:51:d5:40:8b:36:ea:4d:6a:01:59:7f:53:b4:15:f6:f5:
2e:98:94:27:f7:c5:c8:19:3a:9c:cd:f6:b0:eb:ec:98:1b:9b:
63:fa:23:ce:0a:a0:83:d9:45:36:d1:f7:c6:be:7b:cc:06:2d:
2c:16:13:93:9b:c3:0a:79:f7:a2:85:ee:8e:1b:8b:14:c1:67:
cb:74:4d:2a:db:21:f3:ba:da:9f:2f:a0:97:41:33:f3:44:8d:
95:6c:57:af:4c:86:52:99:81:5b:64:07:88:51:19:9a:b8:a9:
a6:38:53:51:bb:25:ab:fe:82:87:0d:44:ef:b5:7b:a6:1a:cd:
3c:d1:dc:55:2a:f4:2d:a3:f0:b9:28:c1:cc:40:64:e7:f0:dd:
23:43:d6:d9:13:b1:a3:56:e0:c0:ce:fe:2e:da:a5:93:fc:e4:
b7:a7:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:03:34 2025 by rpki-client