Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: 4UeNDc1QQ2guhJUbYg9W5B6U383ij5I4lrvQNpZ3N4o=
Subject key identifier: 2B:9E:4C:5B:5D:11:13:8D:48:C3:F0:4F:68:26:AA:EB:00:3E:CE:ED
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01974C3222FD68EB3459A320AB16DEBD7A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0984
Signing time: Sat 07 Jun 2025 21:00:43 +0000
Manifest this update: Sat 07 Jun 2025 21:00:43 +0000
Manifest next update: Sun 08 Jun 2025 21:00:43 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: dGzPBjTz2q6T078Lr9J81ti3M7W6GQR4x8YstZRAUrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:22:fd:68:eb:34:59:a3:20:ab:16:de:bd:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jun 7 21:00:43 2025 GMT
Not After : Jun 8 21:00:43 2025 GMT
Subject: CN=2b9e4c5b5d11138d48c3f04f6826aaeb003eceed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:a4:12:b6:d6:da:81:71:3d:76:6e:2c:86:
49:be:04:f5:d7:4f:e0:d2:60:91:44:84:88:99:0a:
6f:31:91:c2:6e:f8:d4:f2:90:50:ea:44:ec:0b:a7:
00:23:26:dd:54:3a:fb:73:c6:0f:50:c1:71:9a:92:
9f:e1:44:a5:da:ba:a1:49:17:36:f1:4b:c7:c9:7b:
93:ac:e4:a0:3e:8f:db:2e:40:8d:7a:c5:0d:12:0e:
89:cb:e3:0d:33:bd:4c:70:45:56:23:91:76:15:40:
a0:07:10:a3:a0:3c:6e:24:84:42:b3:1e:90:ea:6c:
c6:9f:e5:92:c7:ab:f2:46:f9:eb:9c:ab:ca:b0:86:
a1:a3:de:93:83:71:3c:c6:0d:3a:73:36:d6:09:80:
82:2a:6e:de:81:3b:b6:53:34:02:51:7d:d7:b6:1c:
e0:d9:d9:da:c1:3b:89:c3:da:55:d3:62:cf:20:a7:
c6:c4:20:0c:43:6f:b5:27:b6:8e:76:ba:72:3d:f0:
a5:f4:3e:87:6f:de:f7:14:08:25:e7:b8:60:70:47:
25:60:d2:dc:05:53:6b:a5:60:23:99:1d:fe:a2:9d:
d6:de:18:bb:e9:93:91:66:7c:c5:b8:91:17:c5:d7:
04:61:47:57:cd:d6:21:c2:ec:45:66:07:d7:0b:66:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:4C:5B:5D:11:13:8D:48:C3:F0:4F:68:26:AA:EB:00:3E:CE:ED
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0b:5a:f4:00:82:5e:0b:cc:d8:b3:20:32:a1:8d:e6:a6:cb:
f5:f2:b4:7c:8c:52:c8:0f:88:ad:8d:90:8e:18:70:86:cb:48:
12:f1:7f:4b:87:9e:da:b7:d7:18:48:8d:52:46:f3:4b:0d:0c:
9e:14:e1:35:cb:3f:f2:62:55:4b:b1:c2:0c:4e:3c:09:2a:87:
fd:41:cf:70:60:55:70:cf:8d:8a:db:44:95:c9:91:30:58:c8:
99:94:a6:ff:1d:d9:f9:96:fa:db:3c:02:2c:1c:59:74:bb:3c:
de:ac:7e:78:1b:3d:17:45:6c:bc:1f:3c:6b:9b:fb:a9:c8:0a:
75:e3:ac:40:79:d5:bd:a0:34:bf:1c:b6:e1:5b:45:cf:e6:dd:
52:bc:4b:e6:38:40:81:59:52:04:22:b9:1b:16:3a:67:00:c6:
09:e6:b1:d5:49:c1:ff:1e:60:c1:34:39:60:d9:de:0c:a0:0d:
5b:a6:a5:55:d3:ba:43:56:a7:ff:13:7e:b2:dd:75:14:1f:39:
af:fc:e8:bd:0b:4f:36:45:80:80:0f:c2:a2:de:a5:e8:25:5d:
2d:b6:d9:7d:a9:df:8b:a8:51:4d:e8:56:93:f0:6f:6c:b1:55:
ce:15:bf:7b:72:cc:ee:dd:a9:a0:29:fd:a9:ae:2d:39:95:dd:
64:05:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:21 2025 by rpki-client