Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: Cth9R8DWVoRSmCJxf10gHf+v/KVnXzcBEw7nJvscfZ4=
Subject key identifier: 6E:3A:A6:0C:24:A4:61:31:86:10:B4:7F:F0:5E:17:A9:A9:79:3A:AC
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 0197CCBAFB7D5E569F4F03DF43D4BBD2FCD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 20:01:35 +0000
Manifest this update: Wed 02 Jul 2025 20:01:35 +0000
Manifest next update: Thu 03 Jul 2025 20:01:35 +0000
Files and hashes: 1: 8xMxjtO-k2WYJj5fJmeVkGV5YA4.roa (hash: h2/dulkFhykUkX0igL56x6SI1vv2NsPZ43/9G+3BAxs=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: l/OZrkPhYabIRT89gk3g6/47P+NBIp8m1aWllSyz2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:fb:7d:5e:56:9f:4f:03:df:43:d4:bb:d2:fc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Jul 2 20:01:35 2025 GMT
Not After : Jul 3 20:01:35 2025 GMT
Subject: CN=6e3aa60c24a461318610b47ff05e17a9a9793aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:46:9d:58:a0:fa:9b:f4:40:58:fd:9e:c0:a5:
e4:ba:35:2c:b4:84:48:49:35:c1:b3:53:99:b2:44:
c4:10:13:d5:81:da:69:1c:6f:5c:4d:17:86:b9:4a:
f5:86:b7:75:c7:c6:50:be:6c:69:5f:d7:8c:d7:c5:
99:12:e7:fb:37:3a:72:62:73:e9:f1:27:bf:96:c3:
42:56:be:59:0a:85:21:63:a6:cf:f3:56:0b:28:85:
b8:2e:84:a1:51:64:b1:66:67:5d:5a:72:ea:b0:3f:
de:ec:88:ab:46:12:97:f7:da:8e:72:05:9a:5a:65:
fe:c6:24:d1:bb:a3:53:78:8c:fa:42:5d:40:a4:be:
97:6a:83:e9:0b:e2:f7:c1:4d:38:e1:b3:7d:c6:ea:
40:22:e3:d0:c7:2a:0e:1f:aa:f3:43:32:eb:68:e9:
2e:bd:4a:5a:df:83:4f:57:a6:10:a2:46:15:c2:07:
86:f5:79:75:b6:ab:7f:29:5c:4a:dd:dd:a4:2a:91:
58:72:e4:54:91:d3:fd:de:be:4f:15:d6:e2:67:50:
3a:81:94:fa:dd:68:3b:84:aa:7d:e8:a5:35:d7:08:
79:95:a8:6c:7c:5f:12:05:7b:aa:40:99:45:95:74:
01:8b:60:ae:63:15:ea:c8:d1:42:47:4f:72:5e:f6:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:A6:0C:24:A4:61:31:86:10:B4:7F:F0:5E:17:A9:A9:79:3A:AC
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8b:27:aa:e8:13:fc:b1:0f:b7:0c:3d:26:45:6d:af:f6:f5:
d0:26:43:2c:4f:87:2d:4b:28:7d:40:f9:36:f2:c9:20:04:d2:
b3:3a:94:57:93:31:bf:6c:c0:36:ee:58:b0:6d:41:42:fc:3a:
ed:bb:5a:79:93:10:71:7a:b6:0e:de:cf:77:9d:e1:22:27:02:
20:d5:80:cb:34:2b:9c:09:91:be:4f:04:81:32:f9:e4:da:c8:
4f:39:2f:13:58:3e:d9:01:d7:7e:43:e9:21:80:28:8b:1f:22:
d5:e9:d5:b0:12:c6:7f:2d:13:cf:df:f4:1d:c0:4c:4e:f6:93:
52:ac:bf:81:35:97:69:45:ef:36:28:64:76:ce:4b:47:47:72:
aa:e3:9b:08:a2:0f:d0:08:77:3f:a5:7c:71:40:45:b5:e3:ee:
29:3f:f4:11:98:d7:a6:ee:8b:3d:42:47:62:b5:0a:b1:62:96:
8b:31:04:99:51:60:89:07:0d:2c:6e:e8:9d:a9:ef:53:09:c7:
74:69:9f:2e:07:a3:a9:ef:84:fe:19:64:b7:03:5b:74:94:49:
86:17:43:79:ac:c8:2c:a8:d7:6a:66:51:53:14:2b:63:87:54:
82:a3:68:47:6e:30:b3:a0:73:b5:d8:5f:3a:8a:2c:e8:49:43:
92:96:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:25 2025 by rpki-client