Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: aQmB9+bCiThob+fQgpAxs2r1IlkeOnNkKfA12uSqnQ8=
Subject key identifier: 50:85:64:2A:90:55:1F:4C:06:DF:AC:BE:CE:D1:68:DF:E7:23:DF:A9
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 01974E8E39EB065C1548C2FFA7BD46757433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 12C6
Signing time: Sun 08 Jun 2025 08:00:33 +0000
Manifest this update: Sun 08 Jun 2025 08:00:33 +0000
Manifest next update: Mon 09 Jun 2025 08:00:33 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: 9SVVTF5qyoiid7N89plQMRIfqm4+tpIlksuQxc0c0Os=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:39:eb:06:5c:15:48:c2:ff:a7:bd:46:75:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Jun 8 08:00:33 2025 GMT
Not After : Jun 9 08:00:33 2025 GMT
Subject: CN=5085642a90551f4c06dfacbeced168dfe723dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:89:83:5b:13:6f:c1:93:85:ec:78:f7:be:
50:19:56:94:2b:20:8c:4e:46:6c:80:5e:ae:da:c6:
b2:45:8f:d9:95:ae:ab:01:65:7c:bc:ec:d7:fc:92:
c7:45:e4:06:ab:cf:e6:5f:e5:ae:69:9b:41:80:bd:
93:5f:f7:71:71:2c:e0:12:09:7f:46:26:b9:30:e2:
57:9d:0a:13:af:3c:bc:12:d3:de:64:49:5b:3f:6f:
68:43:9c:ba:ea:b3:b6:db:5c:95:2e:d4:73:83:41:
df:13:40:df:7d:a5:8f:be:88:f1:34:14:fa:1b:75:
18:37:20:19:9b:f3:18:f4:49:b6:16:a1:91:8e:4a:
60:97:8f:45:9a:f5:31:2e:f4:48:51:02:1d:56:5f:
04:c7:6f:6d:fc:9d:47:ab:4c:c6:95:d2:90:87:9e:
43:a4:71:4a:ce:16:13:4e:3d:45:f1:d2:81:85:f5:
62:0a:ee:25:20:f6:01:5e:0c:57:39:1a:29:1a:5d:
c7:2c:da:2d:c8:1e:82:70:18:0f:4a:a5:b8:74:ff:
f5:d4:c8:45:b9:43:fe:b8:82:ea:2f:cb:fc:c4:d5:
ca:29:95:ce:0f:52:18:5c:e0:50:b3:70:41:41:1c:
cf:28:eb:a3:34:50:22:3e:21:8e:21:87:47:a3:cc:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:64:2A:90:55:1F:4C:06:DF:AC:BE:CE:D1:68:DF:E7:23:DF:A9
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:22:1e:da:e1:f5:39:fd:18:48:95:d7:50:f4:a1:3e:b6:
2a:33:8d:86:46:dd:5e:d2:2b:d2:2d:2a:77:55:af:f9:ce:6d:
f1:37:83:59:1d:a2:20:20:ab:38:c8:69:65:64:fa:92:81:f5:
14:37:e0:62:a0:bd:f3:53:bc:cc:20:f2:90:be:69:b8:93:5b:
eb:1c:a0:bf:63:4d:f3:e9:28:a4:68:57:35:9a:12:03:58:cd:
60:43:33:1f:e9:ec:c2:0c:0d:d7:82:cb:83:f0:83:56:f9:87:
8f:e8:e7:7b:d4:63:09:e4:1b:a1:d0:c4:52:90:d4:43:69:88:
7d:0c:f4:48:1a:0d:c4:da:f6:ad:f2:62:f7:56:07:89:58:fa:
b2:12:8e:9e:1e:a2:6e:7c:90:67:3d:6a:d8:b5:8b:bd:11:86:
af:4f:e9:15:e1:36:72:8d:87:83:78:8b:98:41:07:5b:9a:5d:
74:ad:01:15:09:98:66:8c:74:61:e2:81:35:74:23:c0:62:28:
5c:76:46:44:9d:6e:d3:45:b3:e5:a4:23:02:47:7c:5e:e0:cf:
b2:b3:4c:30:b2:be:75:b0:d6:47:15:1b:c9:00:86:9d:26:96:
50:ac:3b:84:83:86:e2:54:1c:7e:9c:96:a1:80:61:6b:34:63:
b2:93:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:14 2025 by rpki-client