Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: jxjrgqLDBXBBJTHhpUjfQQv868NlJi9ABZHgyqZQpbA=
Subject key identifier: 35:78:23:82:CA:CC:3A:C7:A7:E2:DF:38:0C:ED:B5:F5:1C:EB:4E:47
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 01974D0DBEA32ED771A27634B0B0D603C8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 14F4
Signing time: Sun 08 Jun 2025 01:00:35 +0000
Manifest this update: Sun 08 Jun 2025 01:00:35 +0000
Manifest next update: Mon 09 Jun 2025 01:00:35 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: ECYY0jDi7bSrLdBHZflHztI0c3X2ljfnf2z7SxpHkOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:be:a3:2e:d7:71:a2:76:34:b0:b0:d6:03:c8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jun 8 01:00:35 2025 GMT
Not After : Jun 9 01:00:35 2025 GMT
Subject: CN=35782382cacc3ac7a7e2df380cedb5f51ceb4e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:27:6e:e7:82:a9:a7:86:a5:16:8c:72:ab:
67:c0:7f:0e:f3:27:f9:97:bb:cf:96:8d:a5:d6:45:
14:a1:70:84:f6:f5:f2:b0:49:d0:46:9a:e3:7a:e3:
b0:43:51:ea:43:54:b3:c7:e4:19:76:07:15:d8:2d:
1b:a8:8e:5b:6b:65:74:22:21:5e:9c:a0:c3:48:75:
6f:fd:d4:8b:e9:b9:d2:cb:79:3b:6d:90:fc:b5:de:
c9:20:09:c5:a2:3f:5e:bc:7a:16:18:c8:85:62:31:
33:6c:04:12:e6:ea:9c:0d:0b:9a:e6:07:08:b5:03:
3e:92:3f:69:eb:41:ea:77:c3:89:1b:da:a3:a3:e6:
7c:aa:1c:9f:5f:dc:1d:f3:5b:f8:d0:1a:69:e5:b7:
c0:2a:7e:46:78:af:cc:3e:fb:7b:f8:86:7e:53:01:
be:27:14:ab:53:3a:03:2c:35:e5:2c:59:b5:1f:df:
70:d0:fe:02:5e:2d:bb:74:f0:b6:0d:38:06:05:a7:
00:bb:2c:79:f0:c8:c5:11:f1:a2:62:9d:34:8b:a5:
2b:bc:eb:ba:3e:62:ca:6e:10:0b:79:14:3f:c7:02:
83:f1:d7:45:a4:08:3d:14:56:0f:b7:4c:f6:b4:ca:
17:bc:9f:d9:a7:3e:5c:47:12:d1:39:2b:2f:5e:de:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:23:82:CA:CC:3A:C7:A7:E2:DF:38:0C:ED:B5:F5:1C:EB:4E:47
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:c5:18:95:6f:1b:46:6c:b5:fd:8a:06:6e:96:4d:94:ec:
f8:06:f8:bb:67:c1:72:e2:40:bb:f5:00:68:e7:36:59:35:51:
02:ba:2a:69:1d:4c:d8:2b:fb:c7:b4:6b:dc:be:ca:61:2a:94:
c7:ad:58:92:6f:f4:ec:21:68:e7:0a:d6:ff:32:6a:8a:31:5a:
ff:d7:70:a9:30:1a:27:d0:34:f2:cf:0e:ee:f0:c8:2c:02:7f:
36:ed:2f:70:c9:ca:e9:ed:68:95:ff:9e:b8:e9:d2:f4:ea:43:
ca:b8:f9:11:83:d0:c5:61:8b:63:0f:e7:43:65:ca:0d:47:7a:
8a:5a:bd:bd:9d:a9:55:0e:bd:8b:d8:7e:cc:6e:47:05:d0:4c:
10:c3:7f:e5:4b:9e:d0:f2:73:ff:aa:0c:e9:52:61:4e:ea:b6:
a5:23:f8:e7:6d:0a:34:2f:78:6e:4b:37:3b:02:2d:b7:43:0d:
b3:ff:5f:c8:d4:d4:2c:07:cc:3a:01:dc:08:e3:89:72:66:12:
4f:24:ce:11:89:82:f2:e3:ee:da:6d:20:63:cf:c5:74:07:7d:
b7:58:2b:a6:27:43:f3:c0:85:eb:6d:ef:21:2d:09:be:21:10:
2a:d5:71:70:3c:2e:df:42:29:75:4e:50:da:35:ab:65:ff:25:
28:c3:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:01 2025 by rpki-client