Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: Sp7hh9K4PJi3zDzCNl5cY1Ca9GkuqcGTIsfIbmZmXmA=
Subject key identifier: F3:73:EE:77:9A:C0:AF:52:30:98:C3:E0:94:12:B0:6D:AB:D8:6A:F5
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 01974D0DA58495E88D1654890BFDA768A3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 141F
Signing time: Sun 08 Jun 2025 01:00:29 +0000
Manifest this update: Sun 08 Jun 2025 01:00:29 +0000
Manifest next update: Mon 09 Jun 2025 01:00:29 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: HUilsUYTRipFfqyOHUPnkx3oyjjudsvfuB/KwMqq0gg=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:a5:84:95:e8:8d:16:54:89:0b:fd:a7:68:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Jun 8 01:00:29 2025 GMT
Not After : Jun 9 01:00:29 2025 GMT
Subject: CN=f373ee779ac0af523098c3e09412b06dabd86af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:5c:b9:f1:6d:78:55:98:3c:e5:48:90:99:
b5:b3:04:9a:49:2c:79:8b:36:95:60:97:1c:a9:17:
66:64:45:fc:35:6a:d8:d2:dc:64:b2:4f:d2:12:9d:
f6:f5:3a:2c:62:42:42:76:8c:00:07:cf:c1:4a:e0:
a7:f2:73:df:ba:ff:8c:a3:05:53:db:ea:03:51:ec:
0c:7e:27:09:36:a0:8d:8f:65:21:e5:6e:a4:8c:69:
5f:21:c4:6e:55:2f:2b:62:a4:6a:2e:a2:ca:74:8a:
a9:1a:6f:51:9d:22:84:ae:4b:f4:16:6c:68:fb:35:
2d:e8:79:21:93:e1:1b:d0:9c:57:6c:56:34:cd:a2:
83:76:37:2c:25:7f:2a:a5:70:c1:6f:a6:8c:39:6e:
b2:8f:de:eb:dc:28:01:f1:ae:98:ec:03:af:fc:c1:
be:32:35:85:a2:c5:fb:35:60:a0:5e:2f:bd:ee:d8:
5f:28:9b:4c:df:cc:b7:aa:01:ee:b0:8b:5d:53:27:
e5:24:3a:7b:ff:04:65:68:08:f3:1c:8a:e3:ff:ec:
da:14:e5:81:0c:ad:50:c5:ac:e1:99:93:e9:e4:c2:
11:70:79:a7:87:2e:31:a3:83:56:82:a5:7e:32:4e:
be:1d:c0:4c:ad:68:1f:e1:6c:94:78:fb:5f:dc:ed:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:EE:77:9A:C0:AF:52:30:98:C3:E0:94:12:B0:6D:AB:D8:6A:F5
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:95:7b:4b:10:c8:db:4e:93:01:5e:68:15:f5:6a:29:ba:
db:15:0d:51:83:f7:c5:67:d2:c9:87:51:80:fb:e6:6d:ea:d2:
1a:45:21:3f:7d:b8:38:ff:b7:8f:27:b3:5d:e0:e1:ba:88:c3:
96:aa:b4:45:fe:d4:18:1d:be:4b:24:8f:9c:8d:89:41:1f:92:
f7:33:04:bc:55:07:05:4c:9c:27:9b:83:85:40:07:b6:4a:f8:
aa:a8:21:2c:9a:f2:7a:58:ac:d9:c4:7b:8c:38:8f:8e:fb:dc:
5c:8d:50:99:5b:23:35:21:6a:30:28:9e:f8:0d:ac:03:39:71:
3b:db:fc:df:bb:e0:81:d0:a0:b0:da:d4:17:40:f8:86:02:89:
11:03:a4:b4:5c:77:dc:74:b4:5e:ad:b1:09:02:99:cd:75:ca:
a7:e7:47:56:cb:3b:25:ef:f8:c5:41:fc:e3:2c:e1:8e:8f:6b:
46:6d:7b:4b:f7:a8:7d:aa:d2:d1:3d:ab:f1:ca:5c:d9:b9:ad:
39:20:22:57:68:d4:e6:16:42:67:3f:fe:51:25:cc:89:ba:18:
7e:58:bc:b8:7a:9e:b4:fd:f8:5f:c1:b3:b7:d2:0e:5c:3a:74:
dd:a5:fb:31:b4:ac:cc:9e:b6:eb:00:87:3d:3a:6d:b5:70:ef:
81:e4:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:02 2025 by rpki-client