Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: Q17CFlOKxZtSQFGjSutwKBenYJTE0nsWMrHDwzQz3BQ=
Subject key identifier: 80:0E:70:80:1B:25:B6:AA:64:B7:33:A2:08:80:0D:C5:5B:3A:04:11
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 01974A43F928249308E73A6F6DF662BCEA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0CB3
Signing time: Sat 07 Jun 2025 12:00:57 +0000
Manifest this update: Sat 07 Jun 2025 12:00:57 +0000
Manifest next update: Sun 08 Jun 2025 12:00:57 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: PpxOh+whhOPfqGeLgu5KuDbTu6jYn+pOtLpI+RaHp2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f9:28:24:93:08:e7:3a:6f:6d:f6:62:bc:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Jun 7 12:00:57 2025 GMT
Not After : Jun 8 12:00:57 2025 GMT
Subject: CN=800e70801b25b6aa64b733a208800dc55b3a0411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:54:9f:59:cc:24:a1:1b:84:50:65:e8:b9:
0d:e9:91:c0:e3:34:ff:98:1e:cc:7b:90:1f:94:87:
33:63:7f:e8:57:f5:f6:9d:9e:43:12:da:ce:ac:2e:
40:11:a5:0a:0a:2a:34:8d:71:bd:bf:01:73:ca:d2:
52:c7:9b:94:e7:6a:b9:ab:14:76:d5:bc:02:78:e7:
20:b4:89:f9:13:3d:7b:59:93:a6:ef:b1:90:d1:e0:
21:a7:3b:68:6b:3f:7e:57:24:10:9d:1e:41:f2:ae:
87:27:4d:7d:39:2e:f7:7f:b1:ee:a3:87:ba:62:d1:
f5:09:32:3f:05:7b:f1:da:cf:4b:9f:2e:8c:df:7f:
1b:ed:ec:20:08:07:6b:03:f6:cc:6a:00:2d:6a:08:
3f:d3:ff:fe:e8:10:88:1f:73:06:e8:54:b3:1d:69:
17:34:31:7a:53:a6:06:0a:06:6c:27:0f:90:4a:37:
a2:1c:6c:7b:bd:10:fb:02:8b:70:bd:d7:56:de:67:
79:3c:13:c5:6a:12:4e:e8:6b:61:25:d9:a1:0c:8c:
5a:32:2a:9d:99:ea:6a:c9:43:71:dd:54:31:db:ac:
6f:75:a3:3b:1d:69:93:61:e7:fb:eb:80:93:8e:d3:
4b:67:a6:ab:e8:93:f8:38:ff:85:3e:d1:76:da:c4:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0E:70:80:1B:25:B6:AA:64:B7:33:A2:08:80:0D:C5:5B:3A:04:11
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6b:00:fa:41:38:72:46:de:e9:54:34:19:85:c1:3d:81:39:
9c:17:67:8e:42:1f:10:a4:fe:c6:b2:90:3d:2b:2a:46:db:30:
ee:88:2d:18:22:f6:39:7a:67:f0:b7:a8:e9:75:c1:4f:ea:ed:
e0:bc:4d:83:35:31:d8:53:50:2d:67:80:14:75:63:7f:67:a1:
fc:d3:97:f5:ca:a4:6e:5a:5f:b8:67:50:0a:85:35:92:95:4f:
7f:1c:ea:0a:79:1d:a9:8f:84:f0:cb:b2:f7:04:2e:03:b1:ea:
b5:83:bc:a7:a4:f8:1c:0d:5f:9f:16:44:fe:f7:95:20:24:5a:
c6:0e:ca:b8:94:f5:56:1f:9c:f4:d6:97:13:0f:7d:6b:f2:39:
a1:0c:38:05:b8:d4:67:fa:b0:ce:5f:c7:56:cd:e4:b2:63:af:
c6:aa:91:db:03:aa:2d:49:87:2f:54:10:47:1e:38:ed:8f:84:
f9:fa:d1:91:19:22:22:b5:79:85:ea:4d:c7:ac:70:23:6f:34:
ab:d6:fc:62:31:f0:c2:83:7f:12:f7:70:3d:aa:f5:a0:bd:28:
3b:df:2c:c1:af:50:91:10:27:49:d7:98:8e:3b:22:55:55:47:
48:b7:79:ab:b9:07:56:92:e4:9b:9a:cb:55:81:31:27:eb:fe:
d4:2a:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:57 2025 by rpki-client