Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: nfFL/W1fXjya5ytgJg5wIciL/Jl4CenuTdCpM/JMI/s=
Subject key identifier: CB:6D:D8:6D:2A:7F:5C:E7:9B:1D:1E:B7:F8:35:83:7C:AA:4B:63:FE
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 01974BFB3BB88B2FCAC5C6237B10C9BFCDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0DD3
Signing time: Sat 07 Jun 2025 20:00:45 +0000
Manifest this update: Sat 07 Jun 2025 20:00:45 +0000
Manifest next update: Sun 08 Jun 2025 20:00:45 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: kL52ed4b4j3uh+jEpbpLzH9jbqCPwlwMr1VVWQw99cw=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:3b:b8:8b:2f:ca:c5:c6:23:7b:10:c9:bf:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Jun 7 20:00:45 2025 GMT
Not After : Jun 8 20:00:45 2025 GMT
Subject: CN=cb6dd86d2a7f5ce79b1d1eb7f835837caa4b63fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:a5:eb:0d:79:57:9b:1b:72:65:2f:bf:8f:
0a:36:7e:1f:4d:ae:5e:5a:20:3d:a5:17:8d:d0:a7:
fe:92:be:52:23:b8:e5:6e:d4:1a:3e:1f:11:3d:14:
08:80:8b:3d:d4:c5:a0:1d:27:02:e0:40:7b:61:71:
6d:f6:0c:d8:72:9d:ce:ff:18:08:12:9d:5c:c9:63:
3e:06:f1:16:0f:f5:4a:f1:cb:a7:e7:32:62:e5:e7:
f6:a0:96:20:2e:9c:28:63:36:37:6f:f0:c8:5f:03:
26:23:7c:ec:a2:87:2c:41:10:5e:18:de:80:93:ec:
10:b7:06:49:61:0f:2f:21:9c:d3:77:bf:e0:7b:3a:
f9:76:19:29:75:f9:b0:93:27:24:ed:8b:d1:81:9a:
11:70:8d:51:64:dc:3b:72:62:88:a7:f6:21:36:fa:
f6:02:7e:61:0c:64:3c:6a:b6:e6:5e:f7:d2:c8:aa:
86:3b:89:4a:f6:05:c1:12:28:83:f0:9e:58:b3:2a:
50:fb:bd:b2:0c:92:7f:f5:db:bd:4c:f5:d1:1c:4b:
d3:9e:78:b8:e6:fe:b2:9d:f1:22:58:69:72:ab:08:
71:e5:b8:82:10:03:1b:43:f1:d2:5b:a4:91:e6:dd:
3d:cf:95:c2:be:c7:da:e6:cc:11:b4:82:3b:3e:3b:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:D8:6D:2A:7F:5C:E7:9B:1D:1E:B7:F8:35:83:7C:AA:4B:63:FE
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b8:9d:9f:06:c0:50:63:81:16:eb:d9:fe:35:2a:9f:78:6e:
3c:3f:ee:31:11:4e:b7:26:ce:16:ec:59:26:cd:81:d0:af:e1:
36:8b:46:29:48:e1:b6:c4:26:ee:96:74:13:81:9f:2b:c5:21:
e6:2d:90:b9:c4:5a:f8:ed:ee:7a:91:70:ca:74:40:21:5a:4b:
42:ea:71:0c:7f:5d:de:24:a4:ae:b3:07:5d:66:6d:3f:ee:53:
b3:88:a4:f4:98:e9:ca:04:28:98:09:75:d9:43:20:ba:c6:16:
f8:49:bc:4e:bc:7b:db:b7:62:78:29:c5:6b:70:af:79:1d:b2:
6c:c2:15:60:67:ff:d4:5d:01:f0:dd:0c:3f:f4:eb:ef:c2:c1:
37:cc:de:d0:19:bc:13:b3:ec:88:9f:0a:12:d9:42:70:23:31:
5c:88:7a:8b:ed:d6:1f:f1:d2:87:46:cd:67:a5:e1:70:6c:f0:
14:59:ff:18:07:d1:e2:0f:9e:86:43:dd:88:e7:31:57:44:dc:
51:18:98:a2:9b:a5:40:d1:30:bb:33:5f:95:7d:09:08:86:5e:
3d:d0:37:b3:21:31:82:12:c4:01:4f:80:54:98:39:58:b6:0a:
1e:c6:b3:38:84:6a:c3:44:bd:b4:3f:bb:6b:28:7d:d8:2a:08:
5b:89:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:57 2025 by rpki-client