Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
File: ufurlhxKPhbNdhvC_tuaKBd8tHM.mft (raw, json)
Hash identifier: 0ZrbBgzvoB8zBwlJJ1tgdRjvBLuL3ybiIj1uOcHQ840=
Subject key identifier: 2D:37:15:AD:66:21:B3:FE:CA:17:82:61:D3:28:A7:16:60:1D:B2:1C
Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Certificate serial: 01974DE97468109A06FAD4D58F359CA4470B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
Manifest number: 04
Signing time: Sun 08 Jun 2025 05:00:34 +0000
Manifest this update: Sun 08 Jun 2025 05:00:34 +0000
Manifest next update: Mon 09 Jun 2025 05:00:34 +0000
Files and hashes: 1: h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa (hash: h3p/LWTg/DWcs8xgDXGpmbcqHQbGvNr+C69wyUtdibA=)
2: ufurlhxKPhbNdhvC_tuaKBd8tHM.crl (hash: wlADI1ot0uO1hZSo10uGoi4fQIvkSc+2OYvKmKv5dEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:74:68:10:9a:06:fa:d4:d5:8f:35:9c:a4:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Validity
Not Before: Jun 8 05:00:34 2025 GMT
Not After : Jun 9 05:00:34 2025 GMT
Subject: CN=2d3715ad6621b3feca178261d328a716601db21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:74:9d:48:92:f8:c0:34:51:12:a9:47:51:
60:b9:82:26:32:ae:3f:c2:2a:0c:cd:c3:71:b6:97:
a9:06:f1:74:8b:f4:83:8f:0f:54:01:c1:61:5e:35:
cd:95:ca:2f:dd:f1:32:f2:2d:fc:c1:f8:7f:b2:8d:
27:1e:1c:ce:b6:d5:c9:5d:d1:8c:8d:84:1d:23:0c:
8a:ae:64:78:3a:27:27:98:b1:e9:db:37:1e:34:9c:
de:21:86:f0:e7:c1:3a:d9:dd:af:d5:77:e7:4d:67:
84:61:7e:79:1b:a4:dd:9a:69:cc:c5:ce:29:79:c3:
cf:41:97:8e:e6:40:fb:d2:8d:96:86:69:59:b0:91:
c2:39:4e:87:ad:cd:42:f7:e8:57:2e:ff:64:78:8c:
7d:a1:7a:2e:50:6d:09:3d:07:03:0c:bf:0d:74:d1:
a9:b8:7e:16:8b:1e:c0:a0:03:e8:1c:d3:7c:27:6a:
ab:dd:5b:bf:0f:98:c7:0c:73:57:ee:36:8c:0a:cf:
e8:d6:21:7e:fd:3d:9a:82:d3:60:72:08:7a:88:56:
6b:f7:d6:d4:ef:44:7c:90:12:57:1b:d0:61:a1:d8:
4e:28:8d:a1:34:8b:4f:6a:e7:17:53:3c:3d:2c:ba:
10:91:27:f0:07:2d:46:08:6b:e1:57:8f:1b:6b:0b:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:15:AD:66:21:B3:FE:CA:17:82:61:D3:28:A7:16:60:1D:B2:1C
X509v3 Authority Key Identifier:
keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:2d:9f:5e:b4:43:31:73:2a:87:8f:b7:48:60:8b:e6:2f:
1e:b4:88:7b:c1:28:8a:a3:7f:05:5c:c5:b7:03:3b:ac:82:4d:
6b:44:6c:a5:f2:af:7d:1f:8c:a3:f7:1e:9b:21:57:61:a8:a2:
4e:e5:b7:c4:37:25:ef:41:48:59:38:72:f3:76:9f:a2:aa:99:
f4:b1:33:b3:1e:e7:35:5a:4d:79:a3:c2:12:29:5c:21:8a:f2:
0d:55:da:1c:b8:ef:5b:31:df:81:43:67:53:cd:80:bc:9e:d5:
b2:d1:c7:96:99:0a:c8:b1:28:cd:dd:e6:6b:8c:df:42:28:a1:
9d:5d:2c:49:e3:04:98:a5:b0:c9:fd:0c:d5:a9:5f:c8:45:5e:
09:13:06:c5:b6:9f:a5:9d:e9:0d:d8:03:60:f7:f4:fc:64:fb:
75:e8:c2:d7:4a:c9:6b:f8:96:d5:24:01:56:99:d0:fc:7d:56:
65:9f:0d:7c:7a:c1:9d:20:a3:11:0b:9b:47:75:d5:0a:db:e7:
44:8b:2a:72:6c:f1:51:d0:d6:cf:67:08:47:94:b1:0a:3a:1e:
85:36:46:2b:69:ba:4b:31:65:99:02:ea:f4:c6:8e:26:62:c7:
bb:48:9a:b5:28:83:ae:79:20:de:6f:46:7b:e0:11:76:88:e6:
4f:2d:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:41 2025 by rpki-client