
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: Khc2XEmAMTBLMp9Ld+ZQ0FfikJl3v/DutWFdsGeXCa4=
Subject key identifier: 5F:A3:11:E9:E8:77:F1:51:C4:5C:1B:21:EF:67:CF:E1:0B:27:FE:F0
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 01974779AC4EDF5E04096861B0B073E1B9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:45 +0000
Manifest this update: Fri 06 Jun 2025 23:00:45 +0000
Manifest next update: Sat 07 Jun 2025 23:00:45 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 3X1MqofR+DEVLuYjCZimVTDl2RLPbVDitLwskHugjjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ac:4e:df:5e:04:09:68:61:b0:b0:73:e1:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jun 6 23:00:45 2025 GMT
Not After : Jun 7 23:00:45 2025 GMT
Subject: CN=5fa311e9e877f151c45c1b21ef67cfe10b27fef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:98:42:d7:55:9d:c8:48:30:6e:65:a2:41:
ae:68:b9:ac:c0:b8:77:d1:d1:c7:74:d1:05:eb:6e:
98:e1:ea:c0:ad:fa:84:b1:19:b6:17:66:78:aa:89:
19:50:41:48:eb:bf:7e:e4:f1:c0:d1:e1:15:9b:96:
e2:65:45:d2:d8:b9:b2:21:40:6e:2a:54:06:1e:19:
75:41:ad:c6:d3:84:05:82:06:51:27:d9:65:d8:34:
d2:44:c4:46:47:ef:da:4c:38:62:af:63:3c:c6:ea:
2a:50:3d:e3:e9:88:57:37:d6:85:21:a9:fe:79:3f:
97:18:8f:a6:73:29:56:74:7b:1f:6d:61:26:da:d2:
a6:8b:59:f9:af:59:d9:e9:6d:ae:21:f7:28:7d:96:
85:b4:4c:e7:ce:07:14:81:34:cb:bc:cb:7a:1b:1c:
69:97:1d:de:0c:02:b1:b4:b8:70:b8:fe:36:91:0a:
a2:19:fa:c6:bf:0d:7b:b9:37:d3:b8:73:df:1c:ba:
13:61:7c:4a:e2:77:da:26:d7:90:79:76:cb:89:8f:
cf:57:1d:1f:c1:94:5e:cc:ef:c7:dd:c1:4f:ee:b3:
50:52:9b:41:dd:f5:dc:c0:0e:c5:f8:c2:41:4f:83:
9a:ac:43:06:5f:c4:e3:ce:e2:7c:84:66:2f:78:cd:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:11:E9:E8:77:F1:51:C4:5C:1B:21:EF:67:CF:E1:0B:27:FE:F0
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b4:ee:6d:a2:09:66:ff:c6:64:9c:66:0c:20:be:9f:da:a6:
2d:cb:dc:60:bd:f1:86:92:1d:e2:b4:10:9a:73:c5:ce:60:a9:
0b:f0:0e:8f:c1:f6:32:aa:9e:8b:fc:78:51:cb:ff:3f:68:4b:
6d:ba:f5:12:3f:3e:82:b3:e2:7f:a5:fe:33:e7:6a:3e:d0:e4:
76:7a:72:e6:10:de:f0:ca:2e:60:20:e3:50:01:0d:40:5c:be:
77:93:c2:4f:52:f3:23:25:0a:67:cb:42:93:af:1d:23:6d:d8:
18:e7:b5:46:d2:a2:53:d1:73:74:f6:24:3d:88:7c:48:ad:6f:
c8:0a:ac:d7:d2:ff:dc:75:61:97:61:dc:a9:1c:cd:ee:13:92:
3e:7b:f7:8f:e4:00:bd:58:3c:65:47:dc:86:cd:45:f4:4c:3d:
3f:30:a5:fe:0c:7f:b9:ae:63:76:10:c8:36:62:0d:41:e8:d3:
a5:a6:17:66:32:d9:e2:d7:fd:a8:77:63:7f:34:d0:01:db:56:
f8:d2:b2:8a:84:a4:7f:1f:ca:3d:6d:fe:81:ae:13:a4:67:51:
4d:d8:2e:26:51:51:6a:a5:56:6c:c8:ba:c2:75:df:a5:94:cb:
d9:00:f3:af:de:83:49:54:67:74:49:51:8f:d1:f4:40:59:6a:
0c:71:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:37 2025 by rpki-client