Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: rjrXhhtdK/jB5cPjDt11woegEbz0yRKgvt7wOFvBlkw=
Subject key identifier: 39:8B:D3:D3:18:EE:ED:72:19:59:AF:EF:A5:4A:4C:A2:36:F8:32:2D
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 01974BC46003E8690AD795AAA75AC014847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 094A
Signing time: Sat 07 Jun 2025 19:00:50 +0000
Manifest this update: Sat 07 Jun 2025 19:00:50 +0000
Manifest next update: Sun 08 Jun 2025 19:00:50 +0000
Files and hashes: 1: KdXGUsS6YFFnPjVjyeI04m93TdQ.roa (hash: F1EV3pD+ahdpl3VAKymIXnj+Wbddg7Ey2m0ZW8zB4L0=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: qfDcLAlf1AfMr9OYnSZGayZx9I817wS8qQlXW7AXzsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:60:03:e8:69:0a:d7:95:aa:a7:5a:c0:14:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jun 7 19:00:50 2025 GMT
Not After : Jun 8 19:00:50 2025 GMT
Subject: CN=398bd3d318eeed721959afefa54a4ca236f8322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:e1:ff:2e:e8:75:48:51:4d:8a:15:31:cd:
fa:87:8e:a7:90:2f:59:1e:59:7c:12:69:3a:9a:6a:
c2:83:d9:a3:d9:5f:dc:fc:5c:47:96:78:69:9f:04:
f8:d6:de:86:94:1e:35:41:fa:65:d3:3a:b3:c8:91:
fa:39:87:ab:46:09:7a:b3:22:af:4f:ed:7d:fa:e0:
da:a6:b1:5a:b2:50:59:ca:c3:1e:7c:02:83:1a:a3:
a7:2b:1d:e6:d7:84:8e:ae:5a:29:03:8c:b3:2b:d8:
18:32:2b:b4:b7:f4:5c:4e:e7:92:78:c6:ea:ed:4f:
2d:8e:b9:b1:de:ea:e4:a3:f5:a1:bf:23:9a:a8:3c:
1c:25:51:5b:16:29:aa:cd:bf:de:fd:b4:49:1d:46:
b2:1d:76:1f:0c:fc:8c:3e:86:37:fd:8a:92:55:b7:
81:ee:07:71:f1:bc:ea:3b:43:72:69:d8:fb:5e:b7:
25:ac:2c:31:6a:ba:70:b0:55:47:ef:7b:73:91:87:
7a:d5:cb:00:eb:a9:64:30:6a:d0:5f:5f:6d:50:e7:
d4:c7:61:2b:52:86:ae:7c:42:1d:19:ee:ec:1a:03:
0f:39:be:e3:31:48:90:12:d0:aa:03:d1:e4:12:50:
cc:30:cc:fc:b6:83:db:72:b1:1a:34:1d:b2:bb:fa:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:D3:D3:18:EE:ED:72:19:59:AF:EF:A5:4A:4C:A2:36:F8:32:2D
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:44:f3:67:6d:3b:df:f6:4c:8e:e1:2b:77:b1:40:12:71:
f9:19:a8:9d:1d:30:b1:38:a2:ef:a5:13:82:d4:9a:45:99:76:
1d:2c:65:b5:24:86:d1:34:1f:08:de:4e:f5:58:53:46:c0:ae:
8f:f7:cc:30:e9:af:a2:24:34:8b:de:6a:1e:a8:f2:73:a5:55:
7d:1d:90:dd:68:de:33:e3:db:01:1a:b9:8d:d4:32:66:a1:dc:
d4:9c:06:6f:6c:6f:a4:43:83:ff:17:dd:58:75:ca:01:52:fb:
7b:46:d1:3b:64:80:06:d1:63:1a:fd:fc:6c:d0:e4:69:a6:7d:
b3:00:39:e2:b9:3c:a6:14:7d:62:a2:5f:5d:9a:76:ad:98:68:
f4:3e:5e:6b:d9:11:d4:f6:0d:6a:5a:45:55:c0:d4:87:7f:17:
1c:89:9d:ef:66:68:4e:c4:97:12:78:fb:67:ae:7b:1f:84:1e:
15:4e:ab:16:dd:25:9a:af:40:8f:bb:54:db:00:b8:0e:83:49:
aa:4e:d8:df:14:80:f0:cd:3b:c2:7d:fb:21:53:a5:b1:9b:90:
09:10:7d:4e:96:39:4c:e5:2b:0a:c0:f4:4b:a5:bc:18:56:68:
87:ad:21:93:5b:2e:fa:b4:3e:01:42:e0:aa:a2:93:48:09:fa:
57:e0:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:26 2025 by rpki-client