Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: iXBEpXC6jnwhkzNg733htnmdh5g1vubVOPp1YAIwcFc=
Subject key identifier: 0A:63:4F:8A:A5:0A:B4:57:53:C7:E6:1B:FD:00:E4:57:68:26:B2:D1
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 01974BC42AB6BB19C49B96823FEA9D07FE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 0510
Signing time: Sat 07 Jun 2025 19:00:36 +0000
Manifest this update: Sat 07 Jun 2025 19:00:36 +0000
Manifest next update: Sun 08 Jun 2025 19:00:36 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: C4AMV0xt6I2UdGjAsTyeJ21lMsm9q8xXdayAo6Xsd/8=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:2a:b6:bb:19:c4:9b:96:82:3f:ea:9d:07:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Jun 7 19:00:36 2025 GMT
Not After : Jun 8 19:00:36 2025 GMT
Subject: CN=0a634f8aa50ab45753c7e61bfd00e4576826b2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:be:db:aa:18:e4:23:a5:c7:2a:7a:95:c9:
7b:bf:9d:5c:48:58:1d:92:42:66:e1:9d:5c:ef:51:
f0:a2:2c:5b:43:c6:5f:9e:3e:85:bc:c9:71:f1:c9:
d2:3d:8d:bd:8a:d5:b8:dc:fb:7d:ed:e8:f5:15:48:
07:a6:20:cd:e8:86:51:46:f8:09:17:dc:0d:60:45:
7b:64:29:10:59:82:ae:70:58:1c:3c:15:39:b2:90:
4f:2f:8a:75:e1:1e:8e:2a:6b:0c:3f:6a:af:75:59:
35:26:a3:37:ca:97:ff:ec:3a:78:e3:c4:e6:bb:f4:
92:c3:ee:4c:f0:e4:37:a8:22:f9:32:f9:57:95:12:
fb:60:63:21:6a:1c:34:c9:8a:29:70:cc:6a:ab:b1:
69:31:73:c4:8c:44:bb:03:c1:a6:d5:54:a9:34:23:
3c:26:ca:9b:71:fb:d8:e8:e7:10:8a:43:43:f5:b1:
d7:7e:4a:40:0d:53:b1:f8:32:d5:fe:f9:ad:b6:89:
e2:89:70:ed:6f:fc:6f:d0:06:78:28:ff:24:3e:6e:
0f:3e:8d:11:44:f6:90:11:88:c2:3a:9d:11:26:99:
16:25:fb:79:2e:4b:16:42:e9:bd:35:67:2a:1d:50:
af:ff:e6:8b:03:fe:a7:be:e6:16:d8:eb:e4:8f:c8:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:4F:8A:A5:0A:B4:57:53:C7:E6:1B:FD:00:E4:57:68:26:B2:D1
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6c:38:85:bd:e4:7e:25:93:80:00:3a:af:79:57:7c:ae:80:
93:f4:a2:4b:ad:c7:13:f9:51:08:50:db:8a:14:d9:41:a5:2b:
f0:49:02:8d:d2:44:eb:8e:9f:3a:82:bd:ba:a1:8b:fe:b4:55:
e6:4d:06:d4:58:0b:ca:43:56:e0:a5:91:c6:76:05:d7:a7:52:
4d:0c:18:09:7b:3a:45:98:3d:0e:5c:34:30:bc:84:b3:2f:5f:
4d:be:c0:03:1f:e1:54:35:69:47:83:a1:37:f5:cb:9f:33:cd:
c7:80:57:41:30:4f:84:bf:d6:a0:87:be:52:74:ba:ca:a6:f4:
75:a9:53:c2:f8:aa:26:df:0c:09:fa:3d:72:92:06:f6:93:2d:
34:97:f7:98:34:c3:fa:d7:fc:fa:c0:59:4e:fb:3d:54:bb:fd:
67:90:ae:5d:54:62:fc:f2:79:00:ea:2f:44:ee:97:85:8d:b7:
25:34:09:05:1e:62:9d:aa:75:f5:d4:0d:d9:d0:9e:d9:67:47:
dc:96:e4:09:a6:3a:68:62:ac:86:f0:44:5b:03:b2:fe:be:8f:
87:54:65:4e:56:61:b0:67:8b:c2:43:da:0a:fd:7a:13:35:a0:
1c:16:0a:a1:4d:40:3d:04:ed:3c:55:72:32:74:ca:90:2f:83:
a3:39:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:17 2025 by rpki-client