Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: nNulov4E7RdHXVOGDbuioLSDP8rpmPzxCvjYJfba5zk=
Subject key identifier: 7E:F8:F4:2F:15:CD:A8:64:5E:A2:60:F3:BB:67:D1:59:A0:D8:97:EE
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 019750EA71E04B9CD0D462613CF894A02AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0903
Signing time: Sun 08 Jun 2025 19:00:31 +0000
Manifest this update: Sun 08 Jun 2025 19:00:31 +0000
Manifest next update: Mon 09 Jun 2025 19:00:31 +0000
Files and hashes: 1: P3b7DFzAl1mF00eFO0q0Hvx6uqg.roa (hash: 4Vw9mbX/VAtbgUX/fX/IcrRcZH092D/s4XK4tYr5SHw=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: DSv6X8u6f4dBuD8Y5ZnE5J4MFyNxQOHZYIuNnfHvc/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:71:e0:4b:9c:d0:d4:62:61:3c:f8:94:a0:2a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Jun 8 19:00:31 2025 GMT
Not After : Jun 9 19:00:31 2025 GMT
Subject: CN=7ef8f42f15cda8645ea260f3bb67d159a0d897ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:68:3b:02:0b:56:d6:1f:e0:d6:da:26:86:
b1:2b:21:b6:ef:59:80:b5:48:76:da:a5:44:b0:2f:
4a:18:d0:b4:c1:8c:7e:c2:bf:30:c6:56:37:e9:c9:
97:f1:e6:9a:1d:72:11:45:0d:0f:44:0f:ae:91:e6:
67:72:a8:42:40:c1:27:0f:0c:1b:ae:d4:ef:35:f2:
bb:41:e6:64:0f:7a:4b:54:24:53:be:51:4a:68:4f:
ac:fe:1b:fa:90:7b:39:49:bd:3f:98:87:62:22:73:
2a:a9:3f:b8:95:fe:e6:4d:f1:9e:ac:a7:8d:2b:46:
8e:c7:47:45:3a:10:8d:48:ca:26:5e:8e:0f:24:7f:
68:ec:2f:61:dd:b1:3f:db:87:4a:f0:e9:71:ee:08:
f4:d0:a6:7a:3a:39:67:0d:c1:b2:2e:72:80:c4:bc:
b6:30:ca:07:0d:99:fd:5e:99:28:81:0b:4c:ce:5b:
76:71:67:04:d7:4b:29:d7:67:21:b2:65:c1:cd:53:
90:5e:c7:a7:62:df:27:3e:11:93:be:6d:da:34:dc:
ec:44:5c:ed:42:dd:5b:86:fe:b1:2f:ac:00:9c:af:
5e:45:38:6d:7a:38:f6:0d:d0:08:79:dd:41:47:6a:
ac:68:0b:db:19:8b:9b:a1:ca:88:c2:3f:0a:1a:09:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:F4:2F:15:CD:A8:64:5E:A2:60:F3:BB:67:D1:59:A0:D8:97:EE
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d1:94:a7:af:11:d4:e2:c6:11:5a:49:97:a4:be:de:0c:c1:
8f:78:06:de:1f:17:34:31:36:f4:ba:32:dd:0d:35:ef:32:dd:
a7:23:dd:ff:07:a5:3b:46:bc:50:91:f4:62:ef:f8:19:32:c9:
f7:87:1a:d1:51:df:73:aa:d6:50:a8:e1:8d:ea:43:5a:57:40:
5d:82:f4:c1:1e:7b:b4:11:f9:dc:c2:db:5e:5d:af:14:c4:00:
ad:4b:fa:2c:64:3d:71:62:d9:53:23:a5:45:47:b7:7d:25:91:
07:09:ef:59:0c:d6:3a:ec:8f:46:aa:30:62:9d:22:78:fb:24:
b0:fc:e2:80:a4:bc:7a:02:8e:36:8b:a6:c6:33:60:c7:dc:f4:
a8:3a:a0:fe:a2:9f:f0:50:c5:33:b9:fd:03:f4:3c:49:55:60:
ef:6d:fc:43:f3:a4:f2:a0:ca:c1:7d:e7:63:46:46:06:06:aa:
cd:94:fa:06:5f:48:3f:5d:97:df:8f:ac:7a:14:a7:72:e5:b2:
46:ef:85:1f:e0:9f:79:3a:ab:bf:ac:61:0d:52:a5:19:1c:fb:
85:0f:f1:7d:89:bb:08:d6:92:f6:3e:e4:e3:b0:84:c5:a7:96:
91:59:9b:03:71:19:0d:d4:f8:5e:a9:6c:b7:cb:b2:6a:2d:54:
43:a9:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:24 2025 by rpki-client