Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: yofv36uuUypV+y+wkP3aK2LuMpTafAl7QtKdabjg02I=
Subject key identifier: 84:4F:A0:1C:FB:A5:5A:EB:AA:53:47:5F:2C:6A:75:AB:E3:07:AF:2A
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01974A7B68DAB65885FC4148D3A32B38B586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:31 +0000
Manifest this update: Sat 07 Jun 2025 13:01:31 +0000
Manifest next update: Sun 08 Jun 2025 13:01:31 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: 5bz1RoumubbnU9mIUYjZ/SsG77KXgaWepOn79gqoaRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:68:da:b6:58:85:fc:41:48:d3:a3:2b:38:b5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jun 7 13:01:31 2025 GMT
Not After : Jun 8 13:01:31 2025 GMT
Subject: CN=844fa01cfba55aebaa53475f2c6a75abe307af2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:51:48:12:83:b5:11:9d:c4:46:a6:6b:a0:
25:53:f0:65:ad:c3:6e:d2:89:3e:5a:f1:7e:a8:25:
26:34:9c:df:bd:5b:d4:9c:62:6b:f9:86:5f:59:5e:
cf:02:b2:12:36:6e:a8:02:30:67:7c:a3:42:0b:e6:
b8:70:1b:a5:82:0b:f4:85:88:0e:94:9b:f3:b0:53:
f1:4d:ab:54:99:50:84:38:2c:6a:96:52:e4:da:12:
94:40:73:60:53:32:ed:51:61:7d:09:25:7f:b9:d6:
b8:8b:fa:9c:f9:0c:c2:86:d1:0f:b2:4c:64:d9:5d:
59:6c:2f:05:85:c8:a7:43:02:a3:0a:6f:d3:05:d3:
99:86:e4:8e:39:f7:5a:ac:e0:f6:63:7d:6d:80:0d:
d9:50:93:e7:e5:e4:d1:a5:c5:da:fb:bb:24:2e:7c:
3c:84:64:25:f4:06:b3:19:b6:6c:0e:5c:41:73:a0:
d8:dc:6e:57:9c:e1:dc:e3:92:10:3d:13:cd:51:3d:
0f:96:4c:1c:e0:05:f6:03:fa:92:bf:e0:f3:40:dc:
72:2c:ce:f0:0b:1d:29:ea:0f:c3:10:9d:10:a6:0a:
91:86:e7:ef:38:6b:a0:be:f3:25:45:51:36:c8:66:
2e:1d:b5:da:15:8f:42:60:53:4f:88:e0:b1:82:42:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:A0:1C:FB:A5:5A:EB:AA:53:47:5F:2C:6A:75:AB:E3:07:AF:2A
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:78:e4:d9:4d:48:b7:ed:8e:8a:37:8b:f6:77:f3:e8:7d:
fe:ae:5f:b3:dd:ff:49:0f:5c:ee:2e:a1:40:c4:46:4c:97:d1:
9e:b2:e5:d2:52:d1:5f:f9:86:ee:9b:f9:08:ba:eb:8f:8a:5d:
74:dd:44:69:5b:70:94:9d:b6:39:52:ca:f2:74:19:96:0e:32:
af:2b:2f:b8:f5:a5:53:e4:eb:41:93:c1:88:97:34:f0:47:0a:
75:e9:be:c6:a9:43:bd:58:be:93:c8:f5:7a:0a:b1:37:51:ef:
37:86:ab:2c:24:8c:c8:79:e5:4a:eb:81:9b:68:77:9e:b4:1b:
64:97:b1:bb:f7:b5:4f:12:8f:f0:ab:07:8a:ff:0b:19:4c:db:
83:4b:71:35:18:ef:24:4c:98:ab:73:ab:af:1a:58:a7:b7:30:
4a:2c:80:4e:b0:3e:1a:2d:34:b3:29:34:fc:6d:b9:d6:d9:97:
a8:ff:1b:71:b7:79:d3:65:70:d3:c2:af:2a:b6:01:bf:d7:9f:
d2:ce:5d:cd:e1:a5:fc:82:56:f4:24:31:32:d0:60:31:2f:ef:
2b:fe:6d:80:fe:8b:fb:3e:25:ee:a3:2b:e8:43:6e:19:84:6e:
b1:8b:ff:da:86:3c:1f:0c:1d:ea:76:9b:ab:ec:6f:bb:46:32:
af:ba:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:43 2025 by rpki-client