Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier: WNORsl3bfLEFOnyaH/+o3v3naYUbV3a829ApPNtu2dw=
Subject key identifier: AB:7A:44:81:39:71:9E:C8:FF:A6:4E:00:3A:C3:58:5A:58:74:40:29
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 0197499EDBA840DFE1524A2EA4F3CF2DB12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number: 123F
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: hsnfDZZwuvrVgHsrnuZsj6M/tlmlWVNvPrMx4pTlAKo=)
2: XbqqIgUuiPQ7s4i6gwADBbMAwT4.roa (hash: cRp4FxnA8UimLs+QIeRi/nTr91UWmFZBwZVHNphDdoA=)
3: jnFs14ubYigoY0h9h1_Eofh0724.roa (hash: cmLBP5v8zTmaWqQDLZqcYtnuqxPCD1kybV6k+KwkWhM=)
4: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:db:a8:40:df:e1:52:4a:2e:a4:f3:cf:2d:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=ab7a448139719ec8ffa64e003ac3585a58744029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:7c:ee:5a:73:40:30:01:12:7c:8a:62:0a:
86:62:1e:fe:cf:01:19:a1:88:2f:47:22:c8:37:cf:
f9:02:1b:2a:68:2b:e9:18:01:9f:30:76:50:c2:27:
d5:e8:cd:5a:79:6a:58:51:cf:75:be:14:2d:95:3e:
bb:87:58:a4:c9:83:10:18:e5:ed:47:c6:d4:97:08:
7e:0f:6f:70:76:36:49:f2:15:7c:3a:6b:43:d3:d1:
65:c3:e4:ae:8d:0f:6e:e4:89:c4:87:99:b2:38:dd:
4b:6b:df:60:f2:a3:06:76:3f:86:c1:9f:eb:4a:8e:
42:de:8e:f6:1b:cc:78:ed:49:38:63:7f:07:f3:0e:
89:68:09:28:26:70:1c:8f:62:fd:e7:4a:01:ad:c9:
3f:93:94:3d:a4:b2:11:30:16:64:53:b7:e9:53:54:
da:d4:60:20:1d:eb:d9:ff:78:3e:ee:85:bc:2b:b2:
ed:cd:6d:74:62:13:3e:f9:58:9b:14:80:93:ea:34:
3c:83:04:91:f0:a3:7d:03:ec:e4:3e:28:c0:24:78:
d4:24:16:e7:0d:63:c2:9c:b8:df:16:6e:05:3e:b5:
19:14:40:5c:fb:e1:a7:69:ce:35:73:1a:33:d1:20:
ca:81:e9:f8:79:d2:3d:43:7b:30:98:56:13:55:6d:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:44:81:39:71:9E:C8:FF:A6:4E:00:3A:C3:58:5A:58:74:40:29
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b6:35:2f:50:b9:2b:af:90:77:32:05:f0:bc:c7:95:83:13:
4d:79:44:8c:3c:81:d9:c9:5d:7e:63:cb:b7:3f:ff:3a:5f:1d:
14:a7:0e:23:47:23:0f:2d:52:4b:f8:5a:7c:1b:74:7b:58:06:
e3:92:99:3c:98:a0:b9:74:7c:53:96:4b:ab:5b:ab:99:da:f5:
98:e4:e7:4f:24:59:64:5c:50:e2:2a:3c:23:ad:84:b3:92:3e:
8c:88:f6:a1:f3:04:fe:d3:85:2a:94:53:07:1c:39:f3:76:36:
37:9b:98:dd:8c:9b:07:88:d5:cc:ae:a7:60:0e:31:7c:c1:b5:
ed:d1:43:54:e2:84:b5:42:eb:83:cb:88:c8:f3:5b:37:21:d2:
5a:e9:67:9e:32:cf:00:7b:a2:22:c3:b8:c0:c1:fb:63:76:f1:
12:bc:5b:83:28:bf:64:3f:cc:f1:89:64:3d:7a:66:dc:99:1a:
49:bb:c9:16:69:90:3b:ef:f9:26:6c:55:e6:cd:f5:af:58:49:
d3:05:ff:25:e2:9f:93:a3:40:f6:a0:54:44:c2:19:c2:8a:10:
f8:47:9b:82:8b:4a:0a:50:fb:f6:98:ee:4a:19:b4:58:30:96:
9c:44:91:49:f2:f8:0c:dd:94:e3:44:fe:e6:da:c3:e6:c7:d9:
b3:8f:f4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:33 2025 by rpki-client