Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: ZGPaCUly9+qMl4TBls5u7HiPBOt+00qdpGwNt7DVoSs=
Subject key identifier: B8:24:E9:28:7C:70:C7:99:D7:19:93:0D:93:03:9C:51:0B:C1:CF:D0
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 019748C3174A79A8B9641660821D9FFDF02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0E80
Signing time: Sat 07 Jun 2025 05:00:34 +0000
Manifest this update: Sat 07 Jun 2025 05:00:34 +0000
Manifest next update: Sun 08 Jun 2025 05:00:34 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: kGI2h0ynodJrH2q+b+HFOiOQp5IMy81Cf9sV8dHj6cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:17:4a:79:a8:b9:64:16:60:82:1d:9f:fd:f0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Jun 7 05:00:34 2025 GMT
Not After : Jun 8 05:00:34 2025 GMT
Subject: CN=b824e9287c70c799d719930d93039c510bc1cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:b0:b5:25:c9:70:2b:f7:e0:9d:81:5a:8b:
dd:ba:38:c0:40:81:81:01:24:86:b4:8e:fb:4c:77:
66:cd:76:28:ee:ce:78:0e:39:45:e8:67:d8:2e:a3:
e9:98:60:58:4d:5b:3e:41:6c:11:d8:68:af:ee:b1:
03:7e:99:34:22:34:43:ec:72:42:e1:01:45:3e:ab:
48:3c:31:40:df:fe:c5:23:43:97:c5:a1:bc:2e:4c:
56:b1:6c:e0:e2:e5:56:83:cf:9b:1f:1c:35:4f:00:
a6:b8:6c:0a:91:41:a5:cc:7f:4d:e7:d7:7a:6f:d0:
4b:ab:7d:46:39:1b:7a:5c:89:e7:ae:bc:23:30:bd:
27:0a:f7:2e:60:46:95:7d:91:09:6f:5d:c8:15:5c:
2e:0e:ad:53:6a:53:08:ff:a8:2e:82:77:aa:b7:05:
cc:ee:b6:7e:38:43:2f:47:6d:4f:f4:e9:40:e5:4f:
6c:02:63:e8:07:f2:3b:50:46:eb:78:d4:87:84:a4:
02:0a:b0:93:b6:37:e2:dd:e4:b3:b7:07:2d:fc:0b:
04:4c:ec:4c:fa:ce:2d:06:ec:35:a1:f2:7f:4c:90:
9a:7e:dc:56:ac:c2:b0:08:6b:05:44:62:af:9d:f9:
bd:35:40:69:83:40:b5:a0:ed:3d:b9:62:57:62:3b:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:24:E9:28:7C:70:C7:99:D7:19:93:0D:93:03:9C:51:0B:C1:CF:D0
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:b2:14:80:90:db:32:aa:9c:fd:9d:15:75:2d:0e:43:ed:
7b:4b:64:8b:61:15:01:04:82:90:59:ce:32:cc:c7:ee:55:bf:
e3:eb:6f:db:bd:78:46:7e:a5:83:cd:a9:6a:56:19:62:e9:88:
0c:64:9a:93:bb:ec:db:73:60:d7:7b:90:2e:97:03:43:40:d4:
64:0d:d3:01:e1:d2:7b:1d:00:87:12:83:52:06:5f:d6:6b:79:
1e:6f:a7:0f:b4:1c:54:a6:29:94:c7:6f:68:da:a5:f5:a6:04:
f5:8b:46:f9:ed:39:32:1c:47:59:ca:f9:0e:7f:cb:80:ef:aa:
bd:66:be:34:6a:0e:45:c6:c6:9a:50:83:cd:96:e8:f2:f9:bc:
98:7e:06:30:45:7b:e6:8f:ea:4b:5f:49:5b:b2:92:f1:be:e6:
e8:b8:02:b5:6c:c7:e4:52:0a:41:49:e3:9d:5b:8c:5c:e4:78:
fe:da:8c:ab:e1:76:f2:0b:85:d6:48:26:8d:87:3e:df:ac:fe:
7e:f7:5d:f8:fb:88:04:70:d7:5c:0e:f8:01:12:f3:4c:17:02:
79:ce:96:9e:f8:71:55:9d:72:e6:95:6d:22:07:26:16:27:51:
97:d3:13:98:50:50:97:23:cf:20:95:ef:84:87:62:0d:ff:e3:
c0:d4:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:11 2025 by rpki-client