Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: QdRiei1TorWmv3u21dsnJ3hB2Q/INbnAxy0WQzxgOY8=
Subject key identifier: 8E:EB:36:86:9F:B3:A7:9D:C5:AD:39:FC:37:E7:6D:36:CC:03:35:8D
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01974AE907ED2B324A35B9939E9003679428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0D0C
Signing time: Sat 07 Jun 2025 15:01:15 +0000
Manifest this update: Sat 07 Jun 2025 15:01:15 +0000
Manifest next update: Sun 08 Jun 2025 15:01:15 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: /r6eKzVnhAqjvcbomHtpr13OEC823MAoXnMK/uZ/4ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:07:ed:2b:32:4a:35:b9:93:9e:90:03:67:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jun 7 15:01:15 2025 GMT
Not After : Jun 8 15:01:15 2025 GMT
Subject: CN=8eeb36869fb3a79dc5ad39fc37e76d36cc03358d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:ae:25:c0:19:c0:81:fb:b2:64:c4:60:2f:
63:03:a2:da:f8:b4:1a:18:0f:a2:b5:89:28:f0:27:
3b:7a:ad:a4:9d:5b:d2:0d:22:49:60:dc:07:a0:53:
f0:95:b6:4a:cd:d2:05:e6:7d:79:a6:38:05:17:83:
ed:08:15:83:7b:82:b7:4c:a1:f9:99:e0:a6:7b:dc:
1c:90:f8:39:6c:7e:6c:8d:f4:1c:47:a1:38:2f:4a:
a8:b2:e1:e8:44:65:ea:fa:a8:66:40:95:22:01:76:
d5:29:ba:eb:b6:de:65:0d:15:03:5e:b0:77:7b:b9:
e8:af:2b:1d:9d:b2:8e:30:d3:f5:ee:3b:3f:56:fe:
8d:fb:74:70:16:91:c3:12:5f:fc:64:57:9f:35:6f:
e4:cc:ab:25:0d:7c:00:76:a5:84:67:a5:2d:26:58:
b1:16:b6:da:29:22:b9:76:09:61:ba:d7:0e:02:a7:
4e:a0:a0:2e:4b:db:b0:fc:7b:d4:eb:3d:fc:8b:1f:
06:e0:f2:cb:ba:ff:a8:6d:06:e2:84:81:a2:05:f0:
1c:cc:1c:d6:a0:b1:53:25:c4:88:73:6c:be:a2:f3:
a8:cf:f2:ae:b8:d0:1c:ba:fc:86:ab:1a:b9:b6:ef:
58:3d:5f:5c:a5:85:63:6f:88:b1:26:f5:b9:7b:52:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:36:86:9F:B3:A7:9D:C5:AD:39:FC:37:E7:6D:36:CC:03:35:8D
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:12:6d:eb:e3:d6:2b:32:ec:72:b9:82:ad:c0:e7:d7:78:57:
8b:a9:aa:2f:a3:65:11:70:5f:47:37:45:f9:28:08:cd:86:0e:
9c:47:34:09:f9:e9:2f:8b:32:60:f8:d4:6f:70:2f:7a:c5:b7:
bf:72:c3:6c:29:54:a8:b5:0c:18:ae:d2:df:1b:a1:07:bd:34:
c5:f5:da:ab:a9:a0:aa:aa:81:59:79:7d:58:10:46:da:bd:aa:
67:17:bc:f5:f6:84:0b:1c:7c:7c:d4:68:f2:7e:76:cb:67:3c:
4c:3d:45:8d:76:b4:60:6d:6c:01:36:1c:ef:c4:f2:10:a8:ed:
39:8e:7f:20:ef:db:1d:0f:17:98:82:51:eb:0d:71:b7:6c:22:
4b:ae:93:d3:8f:ef:48:97:67:0e:2e:35:64:6f:a7:47:42:38:
81:10:27:07:5e:24:11:ce:c5:46:70:b9:7b:59:01:e7:08:c3:
66:4b:0e:28:18:4e:87:12:6c:f2:b4:45:cc:76:aa:61:6b:ec:
81:c0:db:f0:35:a0:57:1d:8e:7d:9d:9a:36:97:5d:da:2b:62:
1f:78:d3:bd:b3:15:aa:27:fa:58:7b:1c:8f:0c:83:1f:a1:eb:
ba:23:56:ec:4b:2b:13:9d:1a:bd:07:d3:53:06:ae:39:56:d2:
f7:3d:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:53 2025 by rpki-client