Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: aU1jfdwA9oA/sjRHyClPZBwJ3DPRGtKd05ccT9AmYDE=
Subject key identifier: BD:97:3B:AD:34:10:85:7A:E5:88:28:F3:62:98:68:A7:06:4E:A4:1F
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 01974FD7FDD7DDFCE1F2960E22AEF45221DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1459
Signing time: Sun 08 Jun 2025 14:00:44 +0000
Manifest this update: Sun 08 Jun 2025 14:00:44 +0000
Manifest next update: Mon 09 Jun 2025 14:00:44 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: Ua57ojKMt32EL9K1IzR8qroWTq7y1st7Lv5DvulzFl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:fd:d7:dd:fc:e1:f2:96:0e:22:ae:f4:52:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jun 8 14:00:44 2025 GMT
Not After : Jun 9 14:00:44 2025 GMT
Subject: CN=bd973bad3410857ae58828f3629868a7064ea41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:b9:01:40:46:ba:b4:36:70:76:d6:ae:2c:
87:65:98:96:30:76:b6:27:75:d0:e1:d9:ac:70:94:
91:bb:35:12:24:f2:93:eb:76:28:4f:07:8d:ab:e5:
09:90:2e:13:a6:0a:e7:e7:a2:1f:27:bd:f3:85:a6:
70:2d:43:fd:2b:39:a1:0f:e4:ba:2f:76:45:b1:d3:
41:be:67:08:2f:69:23:c1:b7:c3:5f:d0:fd:7b:f0:
9a:fb:99:6f:53:6f:b7:0f:ec:71:90:fd:af:f2:22:
72:6b:41:8a:25:05:af:bc:76:43:56:d7:13:09:c8:
9e:5a:76:2b:eb:10:3f:64:64:59:fa:b9:9d:fc:fc:
a4:2e:02:3e:cd:5a:e1:a0:a1:8c:3d:d4:28:b3:16:
22:c1:be:fe:da:83:50:74:c5:d3:8f:43:0e:e1:cb:
21:f1:36:0a:e4:2e:da:d5:55:4f:2d:f6:a7:fc:1a:
09:57:ae:ce:a4:9f:50:9c:89:ca:e9:04:78:f4:d2:
72:5f:ce:e3:20:4c:35:56:15:94:8d:e1:0c:48:b1:
91:08:13:f0:8e:55:76:e9:84:ad:e2:1e:a7:32:c8:
04:3e:8d:4a:a1:b6:6b:bc:29:b5:ab:c6:4f:2c:5c:
e1:4a:34:43:3d:0c:8a:9d:e7:6a:90:30:ed:d3:1c:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:3B:AD:34:10:85:7A:E5:88:28:F3:62:98:68:A7:06:4E:A4:1F
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5b:a1:dc:97:a9:6a:4f:70:c5:d7:1b:40:97:fb:ca:d7:9f:
85:4c:9e:78:94:8e:ac:b1:69:b4:50:9a:5a:cf:ac:f7:58:f0:
d8:c2:68:0d:61:50:56:e6:b3:7d:f6:55:be:44:35:c2:6e:50:
eb:84:42:60:e0:ba:2c:18:b8:38:ae:12:28:bc:e0:61:c1:4e:
7f:6d:54:6d:53:dc:e1:91:ed:86:13:e9:4a:f0:a4:48:59:e8:
12:c4:c6:8e:75:d4:6a:48:84:7d:b7:f0:fa:3f:a0:32:d9:3b:
90:62:f7:d6:82:23:9c:b2:25:c9:4d:f5:3e:94:38:b8:33:ef:
c8:a4:e6:70:b3:be:2a:1f:77:c7:ee:25:1e:b5:49:5b:e9:b0:
4e:1c:9e:ed:86:c6:a7:23:48:4b:19:98:1f:1f:b8:ed:a7:ca:
d9:94:04:f9:13:50:92:81:8b:67:2a:be:9b:64:b8:11:1a:f7:
bc:ff:8e:b3:d3:6b:15:8c:8d:ef:e0:8b:b1:bf:23:ed:6a:7b:
69:3d:cb:04:53:c1:17:35:ed:00:1a:ba:07:1a:bb:74:74:62:
0d:82:72:36:6e:dd:df:aa:e6:31:62:31:d9:eb:89:a8:3b:8a:
99:97:03:dc:10:c7:07:e6:49:13:b6:65:b8:46:e2:71:d1:f1:
fe:f4:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:11:44 2025 by rpki-client