Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: PHa7kBagL8Y+bWscBl13wCPx2n0pU4NUSIUjSvijVMU=
Subject key identifier: 66:C2:39:26:45:C7:DB:A6:D7:7F:36:F6:93:3A:E5:D6:F4:C4:79:91
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 01974BC44D575C88ACE76024305357F4D501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 12CD
Signing time: Sat 07 Jun 2025 19:00:45 +0000
Manifest this update: Sat 07 Jun 2025 19:00:45 +0000
Manifest next update: Sun 08 Jun 2025 19:00:45 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: TRMw2bwMBxOoeLRynpLC+X+gpU03ANIcEc2fH9l9RS4=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:4d:57:5c:88:ac:e7:60:24:30:53:57:f4:d5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jun 7 19:00:45 2025 GMT
Not After : Jun 8 19:00:45 2025 GMT
Subject: CN=66c2392645c7dba6d77f36f6933ae5d6f4c47991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:a5:91:8c:b5:c0:f9:56:f8:e8:3c:78:1d:
e9:d7:93:78:22:c2:6c:b9:33:49:7c:ae:9e:f2:e1:
be:e5:18:0f:29:f1:d8:c3:63:35:d9:c9:cd:36:2a:
1d:ee:7e:50:4f:e9:fa:e0:c8:84:c5:2d:1b:ac:ee:
be:2f:aa:8a:3e:a8:9b:41:5c:11:8f:0b:c6:40:71:
a5:04:69:4b:4e:c4:97:4d:02:2e:86:68:e9:a2:8a:
61:fd:88:c5:c2:33:32:90:6f:58:ce:2f:cf:16:de:
27:22:2a:06:9b:f4:32:75:80:b3:9c:2e:1a:3a:36:
6b:b9:57:61:f0:c7:36:2b:38:48:1e:6d:de:e4:04:
5f:f9:f6:0e:0c:07:34:2e:ff:5f:74:44:1f:c6:e5:
87:24:e9:0b:6a:6e:51:8a:fa:42:9c:61:0e:c1:ae:
f9:04:c8:72:75:a2:39:c0:5e:17:c2:84:f5:a7:d6:
b1:92:c6:8d:b5:00:b8:42:56:6a:e2:f7:1b:ab:47:
ba:f1:de:92:dc:ba:82:8c:78:c5:82:0e:e1:91:41:
40:a5:6d:62:97:81:16:d6:4c:0c:a7:a9:5b:b8:82:
93:b9:7b:31:fd:33:4e:6a:19:cc:b9:bb:77:67:26:
20:09:98:7d:59:34:5d:e2:3a:c1:d0:37:0e:8e:6d:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:39:26:45:C7:DB:A6:D7:7F:36:F6:93:3A:E5:D6:F4:C4:79:91
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:db:b7:e1:47:7b:53:18:b5:cd:41:5e:27:70:a2:19:a3:
a9:73:df:4d:6c:73:8a:16:46:a1:30:c3:f3:b4:11:9e:db:ed:
bf:ce:4e:11:cb:37:9b:f2:9c:77:09:dc:21:9a:b1:82:74:fd:
22:9c:9f:c8:51:4e:fa:07:9a:3d:99:0c:42:15:4a:b7:4d:c8:
e5:0a:74:a2:2b:de:0e:06:06:fd:f9:f1:5c:07:f5:52:2d:03:
0a:75:f3:2c:a3:88:4f:e0:12:65:81:7d:fe:7d:91:c6:92:01:
68:7d:bf:f9:fb:3b:2b:12:3f:ea:60:7c:f2:a1:b9:f1:bf:af:
71:57:83:c4:9c:13:9c:27:e0:09:41:19:eb:8f:c1:12:d7:26:
51:50:7a:1f:be:87:98:c5:c5:c5:7f:95:3f:5e:67:c1:a9:77:
2d:ab:bd:81:9f:7a:15:f8:14:ae:c6:fe:c2:64:1f:4e:73:56:
b4:9f:b7:cc:d4:83:d8:2d:8d:c0:fc:53:8a:e9:9d:98:c6:9a:
a9:21:9f:fd:de:54:50:39:8b:bb:75:b2:8a:37:6c:ea:fc:13:
6f:80:cd:9a:50:9a:f4:f2:c8:ed:eb:70:c7:4a:4f:45:ed:87:
2b:bb:83:ca:1d:dc:3a:28:0b:6e:4e:0b:dc:3f:63:24:08:40:
27:43:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:40 2025 by rpki-client