Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: OXjVXBcYKxNbYzR4K2VwRGBIrafeZKB94qZgpQztEek=
Subject key identifier: 0C:1E:5C:BB:68:A8:F7:1F:4E:4F:65:50:0C:5A:70:C4:87:63:A8:37
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01974779A6F07F1F4705B15CC7C5A82FDF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 0EA0
Signing time: Fri 06 Jun 2025 23:00:44 +0000
Manifest this update: Fri 06 Jun 2025 23:00:44 +0000
Manifest next update: Sat 07 Jun 2025 23:00:44 +0000
Files and hashes: 1: 1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa (hash: 0loawEu3EsQvN0YOhlZpUuKsy9W2F4KZ2P7ZrPoURyk=)
2: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: HjyMQ9vJnHIT5R927wZK8sEaWozwbK9vvs/jDDW/PK4=)
3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a6:f0:7f:1f:47:05:b1:5c:c7:c5:a8:2f:df:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jun 6 23:00:44 2025 GMT
Not After : Jun 7 23:00:44 2025 GMT
Subject: CN=0c1e5cbb68a8f71f4e4f65500c5a70c48763a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:fb:e9:98:4d:9e:da:8d:7a:dc:c2:95:13:
72:c4:ff:34:b4:6e:56:16:96:44:92:01:ff:07:8a:
4a:78:ee:53:58:06:53:fd:d5:71:9e:ef:a6:c2:d4:
9f:49:0b:2e:bc:db:b0:c8:0a:ee:ef:3c:e0:e5:90:
23:a0:92:4a:21:33:91:2d:36:8b:c1:48:f4:3c:4f:
04:f3:68:2c:c7:75:fb:0f:8a:2a:ab:f6:37:02:36:
6d:9c:0b:61:a9:14:71:ff:b0:48:0d:d3:bb:1e:5b:
3f:4d:e4:89:09:89:41:2d:a4:d1:88:6b:6b:74:35:
6e:5b:2a:6a:77:89:08:6d:39:0a:2f:8a:b2:3f:68:
6d:79:7c:e3:d9:76:74:a3:1b:cb:68:86:9e:c6:e5:
85:de:6a:a1:7b:78:e7:b7:00:ee:80:e4:2e:5d:66:
85:54:ad:5f:68:08:76:ab:df:9f:4c:de:0d:26:41:
56:20:c2:32:8f:3d:75:ec:f8:38:c6:84:02:bd:96:
1c:3d:3e:bc:21:c5:ec:09:ab:b7:86:8d:be:73:45:
fa:05:55:b2:5b:da:dd:b4:6c:e8:1e:e9:89:02:44:
68:ca:da:de:80:5c:00:89:38:02:33:b7:92:b9:26:
6d:8e:a9:e2:19:4a:ae:8d:3c:56:5c:e9:ae:01:61:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:5C:BB:68:A8:F7:1F:4E:4F:65:50:0C:5A:70:C4:87:63:A8:37
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7d:8a:ad:98:fd:d5:91:9a:61:0c:66:38:b1:56:5e:1a:c4:
2e:04:1b:81:17:79:21:f6:bb:a9:fa:cb:66:1e:dc:66:77:6b:
7f:1e:40:bd:f8:94:b7:71:e4:1a:1b:d8:ea:d6:f3:2b:62:5d:
61:47:39:eb:71:f6:e4:54:90:3c:33:29:5e:51:19:a8:74:b7:
18:6a:1d:25:0c:a5:88:f4:b2:63:04:b5:8a:02:4c:b8:89:6b:
4b:1f:1d:cb:10:2e:72:e0:c2:27:99:e0:f6:4c:33:8d:b0:c2:
d2:26:65:10:8d:3d:a0:1d:27:98:70:55:69:b0:ef:ba:70:76:
b6:a9:aa:de:f7:96:cc:63:3c:13:89:08:b3:dc:9d:b2:01:27:
2d:e1:ff:43:a8:2b:6c:9a:7a:26:a3:8a:26:92:f1:1b:e2:c9:
0b:5d:59:e5:39:a0:1c:1c:69:8a:43:34:dc:0e:f9:ff:88:5e:
11:cf:78:36:74:b2:c3:bc:4c:99:bf:b7:c0:e6:d3:fb:5b:91:
3e:36:40:df:34:29:72:7d:b3:a4:f6:c5:92:e8:85:a1:e0:93:
3c:6f:7f:00:4d:8e:a1:92:4c:f1:8e:9f:40:42:08:26:04:aa:
e2:59:b0:83:13:c5:16:ed:f6:2c:ef:14:34:0d:7c:ef:a7:2a:
3a:5e:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:25 2025 by rpki-client