Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: WNAliAbT5tLb50n2wiz57DkAH2LrA/pzU1ixBrP365U=
Subject key identifier: 94:E7:90:39:BA:21:B6:16:34:92:2C:CB:E1:D8:B1:4F:E9:AD:7F:8A
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01975158E421192E3AF9CE500E1305FBC165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0CC5
Signing time: Sun 08 Jun 2025 21:01:09 +0000
Manifest this update: Sun 08 Jun 2025 21:01:09 +0000
Manifest next update: Mon 09 Jun 2025 21:01:09 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: Bk3Oyak1pJKMs37E0ZA6FHmvma5m+NWxvd6njKDruZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:e4:21:19:2e:3a:f9:ce:50:0e:13:05:fb:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jun 8 21:01:09 2025 GMT
Not After : Jun 9 21:01:09 2025 GMT
Subject: CN=94e79039ba21b61634922ccbe1d8b14fe9ad7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:9b:63:d9:e9:8c:63:9b:83:5a:09:de:b1:
5d:f6:21:a4:5e:76:a7:a2:ab:0f:e1:6c:d6:15:b2:
09:de:04:8e:62:db:c7:c2:15:dd:ca:7d:fe:04:d4:
02:0f:84:19:39:d8:60:7d:e8:b7:f0:19:0b:70:b6:
80:b5:77:4f:dd:d7:68:94:dd:d2:f6:36:d9:b4:4c:
62:c6:af:dc:3f:f8:83:18:ad:d9:7a:ba:4e:32:3d:
f2:bd:2e:98:cd:6d:d6:69:9a:78:81:84:1c:2b:2b:
6c:1e:bb:0e:f0:15:ab:16:41:b4:58:a2:ed:07:ee:
4b:55:f3:33:c3:c4:a8:bd:70:26:64:99:10:58:2c:
fc:67:79:2b:fa:e3:6f:bc:59:5b:82:43:ff:be:38:
e8:d5:8d:0a:78:ef:ae:a6:b8:be:d3:e5:02:9a:5a:
19:29:f8:1f:9e:7a:43:13:d0:b9:52:94:52:4a:fd:
6b:6a:72:d7:26:1b:e8:eb:54:b3:39:55:0a:60:3c:
94:81:41:6f:e5:cc:d7:73:46:93:8d:d6:31:19:04:
af:0e:0a:cb:c8:35:25:a2:cb:15:78:b1:a9:00:1f:
70:cc:5c:16:f2:f5:41:24:a4:b3:e8:23:a9:db:7b:
68:d3:e8:eb:35:ee:0c:7b:73:7b:53:c7:ec:34:d4:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:90:39:BA:21:B6:16:34:92:2C:CB:E1:D8:B1:4F:E9:AD:7F:8A
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:fa:1b:a0:9f:a7:06:09:4c:04:89:37:90:61:4b:e0:93:
89:00:a9:36:f1:19:f2:d2:9a:f4:dc:dc:c7:b9:c0:e2:c9:b4:
0c:65:b1:e4:84:12:e6:d8:d8:bd:40:39:9e:a3:28:a1:24:84:
79:e7:03:8b:43:81:f3:b1:21:b9:0b:e0:d0:ad:ef:c3:5b:1b:
7a:4b:3c:de:eb:ec:56:25:73:c9:c7:93:66:03:40:d1:a8:e9:
e3:2e:56:dc:a6:f7:65:59:54:de:a6:f9:3a:9c:56:02:bb:3c:
e6:3e:27:24:e9:e9:fc:c5:16:fe:16:f1:a2:f2:25:fc:25:f6:
08:8c:c2:f6:f2:4d:54:a0:47:c6:6c:3f:ae:63:2e:c8:5f:b7:
58:b6:ba:78:d7:00:f8:6a:38:e0:7d:94:ff:41:ce:c6:f1:36:
6a:17:e9:24:7f:24:a1:2b:fa:16:d1:77:d5:35:ba:4d:d7:0f:
5f:19:f7:e6:43:dd:b1:f9:5d:c8:5e:6a:7e:01:89:69:4f:de:
5f:23:8c:44:2e:76:80:d2:ff:f4:b4:2a:cf:d7:b5:50:12:d5:
d9:f6:e2:47:9b:65:98:3a:b8:b7:b8:16:8d:cd:94:11:f8:f1:
00:4f:c8:81:79:88:d8:95:ee:f7:17:c5:50:b5:b2:8f:d5:74:
b2:f8:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:57 2025 by rpki-client