Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: mpSG3quJ1xfekKJLp+EyqSI2MoiiZqggJUDaiKBuQN4=
Subject key identifier: 9A:B4:0C:3B:14:75:40:F7:A8:42:A0:1D:A2:46:E5:79:36:4A:79:00
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 01974E8E606DC5C04874E347E2DCB681A428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0BE9
Signing time: Sun 08 Jun 2025 08:00:42 +0000
Manifest this update: Sun 08 Jun 2025 08:00:42 +0000
Manifest next update: Mon 09 Jun 2025 08:00:42 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: nMKlmE2/iaAEm5V2c/sJ626Voj87Rr7y2R+wyd3nQFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:60:6d:c5:c0:48:74:e3:47:e2:dc:b6:81:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jun 8 08:00:42 2025 GMT
Not After : Jun 9 08:00:42 2025 GMT
Subject: CN=9ab40c3b147540f7a842a01da246e579364a7900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:a0:2a:6e:83:4f:6b:57:47:34:19:de:14:
34:88:11:81:75:3a:f7:48:2b:f9:3f:a5:31:82:a0:
a6:25:ef:b4:6d:b4:b6:09:4f:08:72:b3:71:39:98:
b1:f6:5a:03:aa:7c:ba:d1:ca:59:bc:63:d0:1d:a8:
fc:fd:f2:ca:87:c4:69:67:cb:76:1f:b6:23:c1:b6:
7d:8c:4a:93:8a:f0:bb:24:65:c4:19:b4:10:54:d0:
ea:54:6b:93:0d:ed:3f:7f:12:bc:02:84:92:07:64:
25:1d:6d:55:99:6d:7e:7e:4c:61:33:40:3e:e6:fa:
ac:a0:3b:cb:ec:e6:bf:eb:24:af:78:8d:bd:5c:4e:
ce:5e:88:6c:96:fa:25:7a:03:56:e0:47:e1:92:80:
11:9e:78:25:21:fe:d1:26:0a:04:96:de:aa:6c:2d:
db:38:5f:5a:83:72:b2:10:a2:9a:97:60:6b:b6:da:
65:ff:7a:9e:dc:a8:79:35:bd:65:a8:64:a1:42:1e:
a7:5c:e3:2a:c5:02:72:de:36:41:d0:30:fb:ab:95:
5d:48:cd:56:83:87:5a:42:37:4c:a1:dd:74:31:18:
8c:6f:41:7d:15:c1:e1:49:bd:13:8c:a1:c4:ef:a8:
c9:3d:96:31:0d:91:0c:ae:c6:d9:67:aa:3c:18:45:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:0C:3B:14:75:40:F7:A8:42:A0:1D:A2:46:E5:79:36:4A:79:00
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8b:19:41:81:fd:13:67:71:80:22:41:7e:48:e4:68:78:49:
01:96:4a:78:88:78:03:cd:f0:9e:29:7b:98:65:e0:95:14:d5:
e8:fe:54:07:b7:ac:34:17:f5:4c:a3:84:2c:3f:9d:2f:cd:b3:
05:bb:52:bd:1b:0d:91:2a:ea:8d:36:d5:42:42:19:e4:e4:ea:
e5:30:a5:f6:85:58:69:cd:16:e2:1d:8d:64:4b:22:36:7e:53:
c4:ca:b4:82:f8:b2:ac:83:cf:1c:b2:9b:85:cd:f7:7e:c7:48:
77:ca:23:6c:ed:23:ac:da:89:bd:41:b2:de:54:50:26:4a:fb:
d2:ba:3c:0f:f4:e6:46:04:e7:97:4f:56:57:09:d9:da:45:96:
29:18:57:04:c5:ea:ed:e7:8f:80:dd:ab:2c:22:73:73:f5:bf:
5a:ae:aa:11:6c:9e:4c:f2:7c:47:0a:f3:08:ac:9c:79:ad:e9:
40:13:31:ac:87:09:fc:8a:4c:56:c5:71:fc:e7:cd:98:ae:06:
f4:29:56:40:e5:e4:63:4c:eb:bb:89:7e:10:d5:76:11:b3:ef:
15:cc:a1:86:06:b5:06:02:d8:80:8d:40:1b:e0:4b:f7:d2:93:
f7:c9:36:e6:9a:a3:23:34:46:93:63:36:27:01:c0:43:78:d7:
1c:22:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:16 2025 by rpki-client