Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
File: UIqaCKvvdNzFEAT0-uAmbWIDleM.mft (raw, json)
Hash identifier: rptrSyttb1bO2BCrFT7eAl+AHtJxIFFXTvjgsbSp9+s=
Subject key identifier: 44:E4:15:A4:1E:F7:0C:07:41:C5:D0:F7:16:96:99:9D:8E:EE:B6:81
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 01974AE91EE8454EE323BE18D0A4275B66E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
Manifest number: 0D71
Signing time: Sat 07 Jun 2025 15:01:21 +0000
Manifest this update: Sat 07 Jun 2025 15:01:21 +0000
Manifest next update: Sun 08 Jun 2025 15:01:21 +0000
Files and hashes: 1: 8CmFhnWxaCeDeglOctNQZC1ZN84.roa (hash: mRPJMJZCvcTnlYvn8UFVdthp3gWoolEvhKxuWOWcGDk=)
2: UIqaCKvvdNzFEAT0-uAmbWIDleM.crl (hash: 4sbXXG7u1erXCn8E9f3Zyo64EAF8vFQa1xK0Q5Jdq/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:1e:e8:45:4e:e3:23:be:18:d0:a4:27:5b:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Jun 7 15:01:21 2025 GMT
Not After : Jun 8 15:01:21 2025 GMT
Subject: CN=44e415a41ef70c0741c5d0f71696999d8eeeb681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:ba:5f:02:cc:bc:9c:80:f3:cb:63:d0:99:
ee:1b:29:93:a2:7b:d1:0e:87:57:65:ab:1b:c7:60:
e3:99:d3:91:ef:e9:02:2d:ce:24:db:e4:e1:7f:7f:
4f:88:ee:f3:02:7d:ed:99:18:72:35:93:c6:7d:40:
1c:f0:85:fb:32:5f:6d:d7:02:e2:9d:57:3f:73:83:
67:e5:c3:9c:2c:34:f6:d1:db:10:e5:95:14:db:a8:
9c:dc:c5:94:9b:99:6a:00:b9:38:ec:bb:5f:c7:49:
34:7b:ef:6e:a3:88:45:53:e5:85:55:d0:6a:b1:0c:
8d:6a:48:ef:33:fb:9a:68:83:19:2a:12:92:40:db:
90:dc:4a:11:c4:a4:07:46:7c:b2:c2:92:12:76:55:
d7:e2:08:7a:1c:7d:9e:5e:9d:ff:02:61:3c:1d:70:
7a:39:86:d9:27:49:d8:c6:91:07:a1:19:23:d3:2f:
bd:8b:2b:89:f4:77:dd:d5:74:22:09:5c:70:15:91:
76:2e:75:2f:33:19:73:29:c1:9e:02:d4:29:09:a5:
a4:6e:ac:7f:93:04:1c:c3:d2:81:e5:22:84:58:3b:
0d:30:29:e3:4e:24:ef:d7:74:9a:d8:93:01:35:af:
e1:99:e2:f0:ad:0f:87:63:73:ac:18:6c:0d:f2:e6:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:15:A4:1E:F7:0C:07:41:C5:D0:F7:16:96:99:9D:8E:EE:B6:81
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:00:8c:ac:27:ea:cd:3c:8e:d7:61:e4:1c:ae:69:1b:07:bb:
6a:b1:4a:70:4c:d5:bb:c6:be:0f:15:cc:6b:e6:3e:15:87:a8:
f1:51:c2:51:84:90:fd:02:96:be:d1:5f:c3:1a:57:9b:98:d3:
79:95:29:d9:86:bf:46:74:be:92:e0:8c:d5:23:ee:71:0b:bf:
81:1e:b1:6d:61:57:28:3e:2b:c8:61:89:c4:5c:fe:b5:99:c7:
cc:d1:4c:01:6f:0a:dd:85:e0:a1:bf:27:24:08:91:f7:92:b5:
b2:73:eb:2e:be:52:dc:7b:99:d7:35:f4:4e:45:f9:6d:f2:7a:
ef:59:20:db:ec:b0:43:ef:06:f4:63:f4:2f:9a:12:e0:45:c6:
c6:ec:e5:7a:e5:15:4c:73:3f:b7:cb:42:e3:e8:be:64:5a:46:
44:4d:48:b8:49:3e:ed:8f:79:2b:e3:04:a5:21:33:35:f0:18:
5e:f3:f9:e8:90:10:b5:64:ee:02:ad:21:78:23:5c:45:78:14:
b0:46:f1:c0:b5:b6:cf:90:02:22:14:cc:06:f4:30:ac:9e:fc:
c5:f2:89:8c:ef:01:34:8c:fa:16:d4:de:f8:2e:73:aa:9e:78:
88:5d:57:c1:ae:f5:ad:43:38:f7:87:17:f6:7d:a0:09:b4:32:
22:31:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:38:46 2025 by rpki-client