Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: Ovy2Krt+uYxF2wKCNFsUGUVYq6bKLx88WIRuRL65l2Q=
Subject key identifier: F1:0A:1E:27:47:72:07:79:85:81:6D:1C:12:A4:B2:1C:C2:B2:4E:B3
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0197493119C310C8B49B40FFE37E0FD3FFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0D72
Signing time: Sat 07 Jun 2025 07:00:43 +0000
Manifest this update: Sat 07 Jun 2025 07:00:43 +0000
Manifest next update: Sun 08 Jun 2025 07:00:43 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: 1HFjvS/MAkRabe88FD1MA/PL82P3vRRiTOXN5BQFpng=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:19:c3:10:c8:b4:9b:40:ff:e3:7e:0f:d3:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jun 7 07:00:43 2025 GMT
Not After : Jun 8 07:00:43 2025 GMT
Subject: CN=f10a1e274772077985816d1c12a4b21cc2b24eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:5d:8b:7d:e6:cb:52:0f:f1:f3:93:6f:c3:
96:c5:94:45:8a:a3:f2:6e:ad:fb:34:c2:72:06:9f:
39:8a:7c:1b:62:36:24:e1:52:78:f7:6b:95:e5:2a:
dc:64:1d:30:89:22:bc:8a:32:bb:91:e9:c9:04:11:
8a:5c:70:bc:43:da:6f:8f:29:06:17:68:78:4e:e8:
41:98:1d:86:5d:bb:03:cb:a9:49:da:81:1f:54:6f:
e7:81:38:35:3e:20:bb:a5:6b:ec:e6:51:d3:09:36:
d6:dd:7a:1c:27:8a:83:45:b0:38:79:91:8e:c3:9c:
09:3c:de:8d:d3:d3:fc:45:04:20:6c:a7:5b:5c:47:
fa:ad:a4:24:59:37:3c:1d:65:f2:45:e9:e1:3e:8f:
a2:c4:04:d8:40:0c:6a:59:b7:62:e6:2c:94:ec:22:
18:d1:2b:46:14:c8:33:8e:72:31:f5:44:23:dd:a9:
87:66:e8:4b:50:22:82:e3:f3:20:8c:7b:c9:7f:4d:
9c:8b:57:a7:4e:69:f4:21:a4:2a:e8:1d:5e:5b:d6:
76:92:6c:93:3a:58:3a:44:d8:e6:21:25:fc:c1:43:
bb:dd:c4:4c:3d:67:4c:1b:59:00:22:3d:04:b9:07:
d5:c3:75:c5:97:99:e1:0b:3c:39:99:5f:68:22:87:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:1E:27:47:72:07:79:85:81:6D:1C:12:A4:B2:1C:C2:B2:4E:B3
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:72:41:57:a9:36:aa:20:17:b5:3a:f1:d3:1d:00:af:11:
db:49:61:00:1c:db:20:ad:82:82:b9:d8:50:97:16:1d:ca:fd:
2e:24:d5:14:21:08:11:ca:d6:1d:e4:82:e2:85:97:9f:90:a5:
30:b5:e6:b8:08:7c:27:44:82:af:47:aa:6b:b5:45:5c:ed:3c:
15:ec:7e:e4:58:cd:00:42:9a:b8:77:f9:92:73:9b:da:0f:5a:
eb:4d:26:09:23:3e:19:4e:86:d1:1c:d6:70:b0:c5:d6:60:de:
5d:73:7c:ee:2f:e1:33:22:bc:19:3d:05:c2:9a:a1:90:13:40:
c3:ef:41:8c:c5:f3:40:13:73:d4:ba:9b:f1:0f:ff:64:7b:be:
47:62:db:c8:8c:b2:43:d4:55:42:20:5b:96:c9:75:b2:74:f9:
6d:57:56:7d:f5:52:c7:cd:50:70:e0:c1:bc:c6:f9:df:fc:f0:
b1:da:f6:05:94:a5:3f:64:d0:5b:eb:b4:c1:34:c7:79:a5:b5:
08:b5:a3:cd:a4:6e:cf:ed:0b:5a:22:79:b3:80:e5:70:d5:b4:
3a:35:b4:06:a8:00:0e:d4:d8:34:05:0f:78:5a:a0:36:a7:44:
12:2a:d5:18:cb:60:a8:dc:cd:81:7c:46:76:fe:ef:63:99:80:
8c:04:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:06 2025 by rpki-client