Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: 2+yakiFpeome31Tx8ZxpEBYS10khxHaj6Bd0ulKfxvE=
Subject key identifier: B7:F9:8B:09:55:A2:6A:EE:15:31:B8:CD:92:F7:2A:36:64:55:BD:BC
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 019752D8EA979CB7AC94033C5E8E233A2C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 04:00:36 +0000
Manifest this update: Mon 09 Jun 2025 04:00:36 +0000
Manifest next update: Tue 10 Jun 2025 04:00:36 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: a/gz2xPqTSWwXBbM/cBLJWgxOZWHRmREuPtl2CutDwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:ea:97:9c:b7:ac:94:03:3c:5e:8e:23:3a:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jun 9 04:00:36 2025 GMT
Not After : Jun 10 04:00:36 2025 GMT
Subject: CN=b7f98b0955a26aee1531b8cd92f72a366455bdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:c6:8e:de:97:f7:39:85:e2:73:d3:46:e9:
da:31:ac:40:7a:a3:0a:f9:92:af:ce:df:66:a8:80:
31:b4:46:a1:ec:b1:98:78:5e:6b:b8:28:34:a0:b2:
7c:4d:b9:fb:f8:cb:6c:62:dd:44:6f:e5:ac:ce:41:
ce:12:d5:2a:09:ac:77:04:bc:b6:62:e6:30:e8:c7:
18:26:ce:1d:cb:91:17:70:3a:ee:ea:2a:64:a2:ee:
22:a6:ef:71:60:ee:2e:33:83:66:1c:a0:ea:de:d4:
4a:bb:e4:2c:aa:29:01:3a:68:34:19:ab:7b:ec:0c:
d8:20:f0:8a:e2:5c:97:05:ae:b9:29:df:26:28:a9:
56:de:82:ef:05:33:bf:db:1e:27:95:31:89:81:b2:
99:1b:b9:41:1e:22:62:f7:93:c9:2f:70:d4:c0:bb:
20:64:99:fa:d4:0b:ec:a7:da:a2:4e:68:0b:3e:b1:
ad:a5:5f:46:65:c2:74:39:91:50:92:32:ed:a3:8c:
b4:83:2c:fd:92:8d:66:17:92:59:c5:00:a9:a3:14:
8d:78:d8:fb:e1:7d:46:38:98:3b:00:5c:b4:3d:0d:
5f:d3:24:8f:6d:e8:5a:6a:9d:f1:f1:30:92:19:b2:
e1:0a:7a:89:e7:46:c2:e9:9c:85:28:f0:da:52:76:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:8B:09:55:A2:6A:EE:15:31:B8:CD:92:F7:2A:36:64:55:BD:BC
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:25:ea:84:58:ce:59:89:e6:0d:c4:9a:6c:85:e8:d3:21:f4:
37:30:2c:95:a0:2c:b9:3a:af:3f:d9:36:5e:64:b4:9b:89:05:
26:e2:05:47:85:d6:d8:85:b5:d6:d1:d2:5c:73:06:d3:98:40:
b8:5a:2a:6d:1d:aa:c8:d2:3f:50:dd:38:ab:14:48:24:f5:61:
c5:27:ed:18:2a:bf:23:b5:6b:aa:16:5c:9f:dc:0e:c1:0d:a7:
86:36:bd:dc:82:d0:b0:e2:2d:51:09:7c:58:3d:aa:c6:b1:b8:
64:ab:94:9e:3e:5a:d0:3e:4f:a1:9e:8f:a4:b5:19:df:04:a4:
cd:40:e6:2c:2b:09:66:db:68:91:7b:87:36:2f:83:7a:5b:43:
cf:07:36:02:c2:f5:b2:4a:71:a2:f5:a1:81:1d:a7:1c:e0:02:
8a:29:c8:35:69:58:92:30:3b:35:52:1f:55:e6:d8:84:32:d2:
c9:88:75:d9:e0:e4:9a:86:6e:73:84:72:9e:77:d8:1d:b6:22:
fa:6e:58:6f:4d:87:39:11:d2:9f:2c:da:01:95:ef:9c:ac:1d:
bf:a4:4f:93:53:7a:de:82:c2:a0:64:28:ef:6b:f6:70:86:35:
67:2d:3d:51:46:89:f1:99:57:10:1e:0c:6c:c5:49:a8:a6:25:
38:8c:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:08 2025 by rpki-client