Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: YzGRxq1AIptLMUIcdlU+Y/x6I5K7URDC9/UX13zrWXo=
Subject key identifier: 68:4F:68:3E:72:9E:2C:28:BA:BB:3F:DE:22:89:F4:F3:DF:3F:71:31
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01974BFB34D5BE40660ECF1A056F0ABAD753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0BCD
Signing time: Sat 07 Jun 2025 20:00:43 +0000
Manifest this update: Sat 07 Jun 2025 20:00:43 +0000
Manifest next update: Sun 08 Jun 2025 20:00:43 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: GNl04/iWYraWWhfplBgh+X0E6mPViSKlSKS+eb6BzRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:34:d5:be:40:66:0e:cf:1a:05:6f:0a:ba:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 7 20:00:43 2025 GMT
Not After : Jun 8 20:00:43 2025 GMT
Subject: CN=684f683e729e2c28babb3fde2289f4f3df3f7131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:a9:bd:e6:21:55:38:96:e4:30:63:a0:6e:
28:15:29:e7:87:6c:a8:2b:29:b0:ea:77:bc:dd:26:
4a:1a:d2:95:50:ab:59:15:f1:a9:06:94:91:d6:d9:
3f:62:51:57:3d:d0:6f:fc:ae:6a:e2:a8:2a:49:c7:
0b:a5:08:6e:26:f8:64:bd:06:b7:93:f0:ef:8a:2f:
40:df:72:6a:86:b1:25:02:90:c8:86:21:db:0c:8a:
e3:e4:f4:36:74:0a:a0:68:4f:67:f8:9c:00:b9:b2:
b8:ce:31:bf:c2:93:ce:9a:0f:e0:72:56:b4:18:e9:
c0:3c:f0:df:0b:b4:6c:83:35:1e:99:5b:5f:b1:8d:
17:30:c6:f5:db:a5:a4:26:9d:58:e0:c2:cf:28:e4:
83:2c:50:73:37:94:68:32:6d:e3:04:73:01:b8:4a:
e2:f6:d7:cf:36:d6:a7:ce:0c:c1:c1:5f:b6:7a:89:
e3:01:3c:79:ce:cc:9e:ad:0a:c7:77:f6:f0:e3:49:
ef:9a:e1:af:40:49:51:16:4b:c1:40:f4:a3:b9:0b:
69:bf:fe:7f:ae:85:6c:f3:72:dc:7b:1b:6a:8e:b9:
0d:73:6a:1b:72:c4:c5:58:0d:49:b3:9f:6c:97:01:
76:1d:b3:17:f5:24:b1:00:a6:d3:71:f3:41:03:60:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4F:68:3E:72:9E:2C:28:BA:BB:3F:DE:22:89:F4:F3:DF:3F:71:31
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:1c:cd:40:42:34:46:0b:38:b3:37:a6:d6:93:ac:66:39:
ab:9f:4f:25:34:ef:22:11:fe:4c:b1:49:ae:f2:b8:8a:d2:49:
90:ae:4c:7f:6b:3d:16:25:a0:7e:c4:46:fc:b7:93:7f:40:78:
0d:d5:ec:d8:6b:7c:33:72:26:77:ad:9b:7e:30:51:64:13:44:
8b:c6:d3:78:f2:0d:49:ef:a6:9a:99:3a:93:5d:59:79:f7:89:
16:6b:4f:bb:0e:13:ce:56:27:25:e5:0e:b9:11:0b:b9:c2:1d:
e9:ec:7d:db:6e:e1:49:54:2a:96:3f:53:45:61:5d:6a:dc:f5:
3b:e1:df:0b:cb:f3:bb:2d:be:81:74:6f:12:38:69:d6:9f:62:
e9:cb:3c:b9:c2:5d:1f:51:74:e6:dd:56:7f:ba:c2:0a:03:02:
3f:5d:eb:6e:54:68:cc:62:aa:19:1d:aa:27:4e:1a:dd:b7:43:
34:0e:d1:f9:4a:30:f4:ba:d6:81:d6:22:f2:ce:80:0e:b6:38:
24:83:07:d7:98:ef:16:aa:7c:c9:7c:35:ec:1a:10:6a:11:eb:
93:b8:b2:f3:f7:31:15:12:23:ed:2b:9c:d1:87:0c:de:80:e0:
27:2b:27:07:c7:a2:8f:7c:5d:85:4a:e5:d4:81:17:cf:32:53:
01:f9:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:10 2025 by rpki-client