Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: k2b/a69IrclnGjggbsBxz6XTWc8OFYWTgVAdXjLS3L0=
Subject key identifier: 05:76:E9:7A:F3:AC:53:2F:5A:36:24:54:A9:84:48:2D:B0:95:34:2A
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 019754FE7750214DF6A0B08D722913783AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 14:00:52 +0000
Manifest this update: Mon 09 Jun 2025 14:00:52 +0000
Manifest next update: Tue 10 Jun 2025 14:00:52 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: GQixr5AzvdceOWp4k1avT0o/uJ8+/UV3vF9C+8kEYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:77:50:21:4d:f6:a0:b0:8d:72:29:13:78:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jun 9 14:00:52 2025 GMT
Not After : Jun 10 14:00:52 2025 GMT
Subject: CN=0576e97af3ac532f5a362454a984482db095342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:0d:33:0b:4e:a1:e5:db:d6:b7:d6:8b:5f:
af:6e:07:cb:10:16:ef:f1:b1:9f:91:f8:93:09:c8:
b6:9c:3a:d6:23:98:f9:15:c1:cf:e5:1a:63:05:2e:
af:8e:b2:23:36:98:96:2a:61:52:d9:59:f3:3e:ca:
f7:cf:8d:51:68:9f:9f:b0:b7:69:04:de:f8:cd:46:
2e:cb:c1:3b:96:db:9d:a4:fa:4d:cf:19:16:64:30:
92:74:f1:6d:8b:54:a3:35:28:2c:46:76:89:9c:a2:
ac:78:56:53:22:22:04:b6:52:09:cd:44:70:49:d0:
9e:07:6b:9e:4d:28:c4:c6:d5:10:b7:44:4a:af:1e:
40:da:e8:40:ec:c6:06:35:fe:01:d7:43:06:11:6b:
ae:42:7e:e6:bf:1f:76:b1:5c:9f:e2:42:7e:56:96:
97:4d:51:82:79:3f:92:66:34:f2:6b:88:9b:58:cf:
40:40:9b:53:fc:0b:4b:0b:62:84:56:06:84:b3:14:
ec:3b:9e:09:f1:9d:25:3e:97:d4:3b:ab:2e:5a:50:
06:04:a0:88:03:dd:7c:8a:d1:b1:54:6a:32:1c:e1:
c6:34:30:31:7c:55:ae:62:fa:96:82:93:1e:6b:16:
26:75:1a:68:7d:0c:18:21:46:c7:da:b9:c8:5e:44:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:E9:7A:F3:AC:53:2F:5A:36:24:54:A9:84:48:2D:B0:95:34:2A
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:a9:08:aa:af:4e:16:a7:bf:a7:40:f8:3a:30:b3:9c:80:
ce:4b:98:0b:5e:ec:d7:ec:bd:28:cc:c9:36:ae:5d:7b:ab:41:
62:88:11:cf:d0:89:e6:50:91:3b:1d:ae:c8:82:01:73:4b:54:
7d:ce:71:82:fd:ef:ad:f9:66:12:cd:d4:09:3c:3e:0b:18:60:
fb:6c:ec:80:37:04:9c:5d:72:77:7c:b5:88:1a:dc:17:0b:27:
16:a9:84:eb:77:6c:fa:5b:b7:7a:1d:8b:05:e4:bc:62:e8:2a:
77:71:f0:30:12:5d:8d:1c:4e:82:12:48:a3:35:26:8e:84:24:
41:4c:0f:15:4d:bd:00:70:ff:3e:9a:e8:a9:81:24:a6:63:48:
07:c8:71:6c:47:db:a5:06:6c:2f:51:f5:25:40:f8:94:6c:5c:
68:e3:29:64:e5:9d:04:04:f9:c0:2f:bb:51:94:a1:34:06:c1:
50:5b:65:c2:19:fb:66:e1:67:e1:19:60:9a:08:1c:65:54:22:
da:34:af:cc:76:71:3c:08:df:dc:b0:d6:ed:34:d1:8b:be:66:
a5:6f:f3:53:32:f7:b5:66:59:21:a9:fe:f0:dc:d9:65:b9:5a:
ea:47:d7:d1:9b:3b:d4:1c:04:f6:ba:8f:f5:dc:17:df:81:fd:
32:d1:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:09:04 2025 by rpki-client