Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: OGuLocpmWsthEJN0GRdtjf4NY/i4/fnZPg0074O6x5I=
Subject key identifier: 45:38:FE:A0:E4:E3:97:B0:36:E8:66:74:89:E2:CB:EB:FE:80:0A:82
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 019771BFAFE1B475D79842E58041C0DE7C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 04:01:17 +0000
Manifest this update: Sun 15 Jun 2025 04:01:17 +0000
Manifest next update: Mon 16 Jun 2025 04:01:17 +0000
Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: 4ZgX3ZbEnofzj8WkqCCxpueGakbhvE9B2wqF9d1lyC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:af:e1:b4:75:d7:98:42:e5:80:41:c0:de:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Jun 15 04:01:17 2025 GMT
Not After : Jun 16 04:01:17 2025 GMT
Subject: CN=4538fea0e4e397b036e8667489e2cbebfe800a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:2f:9c:0b:ba:c5:65:cd:20:3e:c5:8e:ac:
57:ea:5f:d0:29:2d:69:01:45:da:22:8a:82:b8:e8:
a0:86:9b:08:c8:fe:5c:cd:2a:82:f3:85:40:dc:8e:
a3:31:c4:60:c1:f8:b8:3e:4a:4b:42:78:15:c0:a8:
49:ac:55:02:8c:66:31:4f:9e:57:d0:9a:56:57:32:
52:16:a7:fa:9d:df:57:f0:20:d3:33:b3:5f:c7:8b:
e4:e7:25:f5:13:fc:3a:31:0e:33:63:ac:d3:28:ab:
aa:04:70:56:75:f2:5c:9e:bc:e1:6d:04:09:19:db:
1f:70:18:4a:a3:62:4c:8a:f2:6c:52:74:52:d6:19:
f5:96:c5:b6:6d:a2:84:6f:6d:50:87:d3:9a:0d:22:
33:27:60:ad:cf:6c:02:ee:00:15:a8:b1:b6:86:bc:
68:33:f9:45:d2:5b:e6:41:ab:28:ef:79:e0:1d:15:
42:65:08:34:05:cc:0d:45:a9:b4:2d:8f:c7:5f:c8:
b6:d8:d4:bd:6c:45:9a:9f:8b:78:84:33:cc:6b:82:
99:38:65:54:63:9d:24:a8:12:fb:9a:07:09:f1:a9:
c3:51:20:41:cf:0b:19:74:c6:f7:dc:88:a0:b5:1a:
3a:97:2f:09:b1:98:81:df:ad:ab:88:d5:31:09:70:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:FE:A0:E4:E3:97:B0:36:E8:66:74:89:E2:CB:EB:FE:80:0A:82
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:5e:24:bf:47:04:90:bc:9c:98:8e:90:f9:07:6e:31:6f:
c4:c5:58:db:5f:53:97:ac:cd:aa:70:e6:da:9f:ac:0b:d6:82:
58:3c:a7:99:ec:69:55:f4:4f:58:02:62:09:4f:03:07:da:f8:
d5:82:91:f8:44:af:32:56:35:99:4e:07:c1:4a:33:23:7f:77:
7a:2a:50:7f:9b:42:a5:38:f3:f3:e4:de:64:24:ed:68:85:d6:
18:39:3b:71:ac:c0:c2:b0:c8:c4:22:22:28:b2:0d:17:91:0d:
7b:d4:a8:66:45:c9:90:86:33:62:45:ab:43:09:95:54:7d:47:
1b:0e:bc:3a:31:df:c2:b8:84:8c:b8:b9:f7:3f:64:18:a0:6c:
85:eb:5c:35:62:6f:ba:86:2a:28:82:eb:c5:69:89:e0:42:3f:
68:52:f6:2f:10:1a:45:e1:c6:e9:ac:22:8c:13:18:43:3d:d3:
14:fc:2e:3a:e9:4b:88:7e:e2:74:ba:99:b4:9e:c2:3b:dc:75:
4d:4c:57:4e:6f:c3:67:6b:17:66:5b:8e:c9:3f:7f:38:9b:9d:
8e:59:e1:31:ce:84:93:bf:b1:80:8d:64:fd:c2:73:6e:4e:e1:
42:84:93:aa:89:c1:14:cb:e8:9f:7c:20:7b:b4:fb:3e:f7:8a:
7a:33:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:27 2025 by rpki-client