Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: +lkfJKoAafeEyPWPJ66SDSMOfjLqkWO+lk96dg7RKN8=
Subject key identifier: 4E:F6:66:02:3A:A8:AA:C0:8E:85:61:A2:EE:05:50:2A:B4:CB:1E:5A
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019753B46D8DF0473655C7365B60ECEAD6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 08:00:22 +0000
Manifest this update: Mon 09 Jun 2025 08:00:22 +0000
Manifest next update: Tue 10 Jun 2025 08:00:22 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: FnuQMi22y+08jLNERri4EkYmN+/x5RZhLCTDz5ObnLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:6d:8d:f0:47:36:55:c7:36:5b:60:ec:ea:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Jun 9 08:00:22 2025 GMT
Not After : Jun 10 08:00:22 2025 GMT
Subject: CN=4ef666023aa8aac08e8561a2ee05502ab4cb1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:84:a6:d8:91:f7:7e:d8:80:03:cc:b1:e5:
9e:5d:81:3e:94:c3:6f:3f:ba:67:41:04:b5:90:98:
e3:08:7c:97:16:75:8b:6b:df:c9:e4:d1:f2:4d:b3:
55:53:82:4e:7f:1f:d7:2f:5d:51:1a:78:e6:97:af:
86:36:80:46:19:8d:1b:6b:bd:08:aa:94:1c:19:df:
bd:3a:35:ed:12:d7:cc:c9:cd:ea:60:76:28:24:ee:
07:bc:2e:1a:e7:8e:48:ca:cb:c9:41:8f:cf:c7:eb:
88:a3:a2:59:0e:44:67:57:9a:b4:4d:0f:5f:0e:24:
6d:58:55:d5:46:0a:79:1a:29:9a:93:f8:9a:5f:d1:
2d:61:43:19:fa:64:26:0f:81:ef:22:c6:36:64:ab:
5c:5d:13:c0:b1:6d:c0:20:1e:d1:20:e9:94:fd:41:
c0:91:a6:59:c6:fc:64:b1:3e:ca:3f:41:f0:45:f2:
f9:ab:c8:8a:be:41:de:83:2a:ba:23:d0:eb:d6:c1:
ea:72:37:4f:f2:a4:90:ca:68:a4:8c:6e:25:8e:0b:
45:04:3d:f6:bf:44:44:d1:e8:eb:a8:c8:4e:e0:c9:
bd:58:e3:5d:fd:de:ad:0c:63:30:c1:ad:f3:e4:2e:
e1:f5:1d:61:b0:2b:d9:4f:7f:b9:b2:af:44:d2:fd:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:66:02:3A:A8:AA:C0:8E:85:61:A2:EE:05:50:2A:B4:CB:1E:5A
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5d:af:66:3d:04:9a:96:51:4f:c9:0c:54:fa:ec:02:87:0b:
6e:b6:71:f7:ce:65:4e:41:f2:58:64:d5:d2:67:50:08:00:c8:
4a:34:f1:2d:f1:d4:76:d7:c4:bb:e4:d5:35:5b:b3:50:86:22:
a5:cb:97:c3:3a:39:fa:08:3d:5d:3d:ef:00:ca:6c:2c:b0:4a:
e8:01:08:cd:0c:30:69:11:5f:84:40:26:cb:a9:ef:17:9c:f9:
8c:d7:0e:a1:0c:74:86:14:d3:35:a5:a1:39:e3:b1:50:b1:9b:
79:b9:9d:8b:0d:90:30:06:11:0c:d3:c2:97:49:86:16:92:85:
38:5c:d1:d0:86:a2:b3:dd:10:e9:9a:9c:96:78:c0:8f:08:a0:
4e:c4:56:35:d9:7d:2b:27:2e:49:19:73:9c:cc:b8:73:aa:0c:
90:92:0c:0a:75:86:cc:fc:08:a2:34:c1:54:fd:73:3e:58:ce:
a0:9e:85:7a:a9:6d:26:28:f1:8a:43:49:b5:a9:2d:ed:c1:41:
33:13:c9:fc:2c:8f:20:53:c7:a1:02:40:09:28:61:e5:03:a7:
69:7b:f5:3c:cc:b6:ee:9c:f1:7e:51:01:34:a6:59:73:0d:0c:
a9:7d:3f:3b:d7:3e:f6:8d:4c:40:15:01:21:dc:23:c5:28:5f:
ef:10:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:23 2025 by rpki-client