Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: Ll6D5maV+uBC++hsJygHaVXppvcByHhrSdRZcOAPo5E=
Subject key identifier: CF:46:E7:9F:4D:70:C1:D6:01:BD:5E:B6:05:50:FC:CD:35:A1:19:20
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 01974AB13EEB9708167B19FE3084A28FD379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:19 +0000
Manifest this update: Sat 07 Jun 2025 14:00:19 +0000
Manifest next update: Sun 08 Jun 2025 14:00:19 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: G1+8uwYhByjR8bfdsp8ItHinZQk1oOleTB//sRcPwyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:3e:eb:97:08:16:7b:19:fe:30:84:a2:8f:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jun 7 14:00:19 2025 GMT
Not After : Jun 8 14:00:19 2025 GMT
Subject: CN=cf46e79f4d70c1d601bd5eb60550fccd35a11920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:e3:ee:58:5f:ce:b0:e3:dc:58:7e:45:69:
94:44:06:62:48:4e:e3:e2:34:6a:2e:08:73:e7:9d:
32:5a:0f:11:7b:9e:0f:90:3c:39:e6:d6:c5:2f:63:
05:db:15:f2:ba:7d:4a:9e:47:6e:b3:18:28:24:e7:
b2:43:af:31:04:23:c4:3b:3f:c7:e9:37:65:3b:5f:
33:57:c9:45:1d:05:4f:49:f3:8e:26:24:3f:c7:0d:
8f:1c:cf:ab:c8:1e:34:31:52:b2:31:2e:54:c7:47:
15:6d:3a:e9:6d:44:54:de:dc:34:f0:75:02:f9:34:
b6:4a:d1:91:eb:ee:76:04:03:c9:51:fa:85:67:58:
6e:48:fd:0c:ff:4a:c5:74:1c:b2:34:bc:b4:05:52:
ac:d9:21:2e:e5:af:9a:fd:22:83:db:88:e1:e8:a0:
1d:57:84:86:e7:da:8d:56:77:30:d8:af:0a:49:c7:
e5:02:9a:ab:b6:41:a0:b8:55:5e:50:cd:93:ba:43:
fa:2f:91:0e:ea:a5:63:b8:00:f0:dc:4e:0d:4a:19:
9a:c9:96:62:25:a2:c5:ed:67:be:bc:41:62:ce:84:
7f:75:5d:8d:04:1e:b5:8f:20:a4:01:c1:72:6c:f3:
82:b2:e3:31:88:29:8e:52:b0:e9:41:43:73:5d:d1:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:E7:9F:4D:70:C1:D6:01:BD:5E:B6:05:50:FC:CD:35:A1:19:20
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:eb:36:17:79:c8:dc:ce:85:88:da:57:65:b0:e2:e4:cb:e5:
8d:69:6a:bd:59:fc:40:8b:de:64:85:a4:21:b1:93:7f:2d:14:
6c:b5:04:4b:68:96:2a:5c:a0:c3:a1:69:18:77:3c:c6:ff:44:
a5:e6:78:78:f2:9d:f0:da:90:52:87:4a:a1:3b:53:ce:1f:13:
e3:18:95:46:11:3c:67:49:5b:f0:3c:0a:f2:dc:fd:d3:81:74:
d5:2d:d9:cb:b9:3c:a2:f3:81:6a:64:70:4d:25:df:cc:f9:04:
3c:3a:d8:dd:83:6c:ce:b9:64:70:25:0f:a6:7c:99:72:ec:3f:
59:6a:03:21:bb:59:97:78:03:0f:22:ec:59:fe:7f:d6:e5:46:
e6:11:8b:3a:fc:12:43:dc:71:2a:f8:78:39:75:c5:92:41:4c:
24:0e:3f:aa:9f:0d:24:41:fb:4a:74:2b:32:b5:52:33:5f:40:
ca:e9:ad:65:e1:53:7a:84:cf:1d:e1:48:af:ce:99:41:6b:f6:
16:85:e1:09:15:4a:8b:da:cb:08:6e:67:b1:0d:26:c2:cb:f8:
aa:7f:d7:d6:50:bc:5f:da:9d:01:ac:36:40:de:bc:3d:cd:d2:
9e:8c:0e:61:6f:2b:c7:e9:1f:0a:b4:7d:56:eb:1c:4c:8d:e9:
a3:1f:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:09 2025 by rpki-client