Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: tHUL+xEIeHMtQ9X9AurQDKUCWdv5ZGMrCQzJFX3KqJ0=
Subject key identifier: 3C:53:85:7E:47:FF:8E:B7:FA:E7:A5:DF:55:FE:3B:15:B2:83:18:FB
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01974AE91C4CB5C621EB1A7B9ADE6735470B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0DDD
Signing time: Sat 07 Jun 2025 15:01:20 +0000
Manifest this update: Sat 07 Jun 2025 15:01:20 +0000
Manifest next update: Sun 08 Jun 2025 15:01:20 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: wFA2mOC4va3erCiitgIe/Xv89UwYEGRM+MNQurImL3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:1c:4c:b5:c6:21:eb:1a:7b:9a:de:67:35:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jun 7 15:01:20 2025 GMT
Not After : Jun 8 15:01:20 2025 GMT
Subject: CN=3c53857e47ff8eb7fae7a5df55fe3b15b28318fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:cd:93:36:32:24:be:c5:f7:8b:7c:09:4c:
f8:c1:10:4b:f7:20:a4:ef:99:dc:ad:4b:92:d7:7c:
8c:76:55:87:fe:f0:c5:8d:30:c3:7e:41:9a:00:03:
d3:13:30:ae:1d:8c:5d:74:d7:3c:f4:bf:0e:f9:f3:
bf:7e:e7:b6:41:78:fe:e2:1a:20:df:74:49:20:d5:
97:71:26:ec:99:13:ff:8b:d1:a5:fa:67:56:04:31:
3d:08:4d:1d:6e:aa:55:0c:a4:23:a7:b3:fe:51:2b:
18:c2:a2:8d:2c:c8:44:68:1c:30:11:84:b6:64:70:
9a:99:d9:3a:55:ea:ec:9c:6f:0d:de:a1:98:63:67:
a8:d6:34:77:a6:c4:f1:b4:e4:e2:42:30:15:62:ad:
3a:55:54:fd:23:f8:ef:c6:b0:7b:ed:d2:58:d9:34:
84:bd:c1:86:65:67:73:36:27:3c:d2:c2:9c:7c:8e:
73:1b:07:00:46:23:f0:a1:ed:02:b0:46:83:8a:19:
01:6e:43:2e:ef:ec:95:bf:ad:47:33:7b:8b:63:f2:
8e:ab:45:fa:36:0d:b5:48:e1:07:04:c9:49:d1:91:
87:c0:92:de:34:a7:4d:cc:1e:58:ee:b0:c7:bf:bc:
62:1a:20:52:4c:36:ac:66:6c:dc:45:20:ef:72:4e:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:85:7E:47:FF:8E:B7:FA:E7:A5:DF:55:FE:3B:15:B2:83:18:FB
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:4e:a3:1c:b6:26:01:e1:f2:1c:a1:f1:bb:fd:3d:bf:29:
d9:d6:5a:48:50:61:78:5d:d4:08:49:b1:db:43:db:3e:34:a5:
a0:ee:b4:73:bb:a0:90:59:60:85:b5:f2:34:c9:cb:67:34:b1:
80:15:59:df:ad:48:d0:e8:0b:30:4c:13:24:56:c5:c7:d4:28:
5f:21:5d:cd:aa:cf:ed:7d:dc:48:33:4a:4d:fa:19:2d:86:89:
6a:ec:9c:10:47:c7:77:bc:4c:0f:18:92:12:9f:2d:7b:b6:71:
88:45:94:eb:73:e8:75:a8:d4:7a:43:5b:3f:1b:bb:5f:48:f6:
c9:17:d1:49:73:5b:dc:fd:8d:4f:2f:a0:78:86:ea:3e:4f:d8:
30:35:16:6e:79:7a:22:66:3b:a6:a0:bd:f5:58:6d:8a:e9:c4:
fa:1b:af:96:52:42:51:1f:76:73:4a:0d:91:b2:96:45:cf:bb:
4f:e2:43:d5:25:33:a4:0c:13:3c:66:69:96:c6:87:d4:ed:5c:
34:cc:8c:9d:64:10:c5:83:91:92:cd:f1:e0:d0:9f:e0:c3:3d:
a3:95:42:8f:17:3d:7a:5f:6a:3f:7b:60:b9:4b:2b:0b:ab:a7:
f7:c8:e7:26:d4:3e:4c:d7:89:ad:61:8a:dc:c8:97:75:16:78:
6a:e0:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:19 2025 by rpki-client