Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: f8Kg9h7P9z0UNQBTZ6+UY577TUNihgyMsAjAR3++Hhw=
Subject key identifier: 64:7F:3B:D3:8D:78:8D:4B:2B:24:A6:AD:BE:FF:13:78:9D:C8:97:18
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 01974BC482CAC67167C94DE25D2CC7CCE0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1590
Signing time: Sat 07 Jun 2025 19:00:59 +0000
Manifest this update: Sat 07 Jun 2025 19:00:59 +0000
Manifest next update: Sun 08 Jun 2025 19:00:59 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: 3uDqrAcVoswsIpvy3kAQzaFvLL7XXPlEREwhVPBpaaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:82:ca:c6:71:67:c9:4d:e2:5d:2c:c7:cc:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Jun 7 19:00:59 2025 GMT
Not After : Jun 8 19:00:59 2025 GMT
Subject: CN=647f3bd38d788d4b2b24a6adbeff13789dc89718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:34:08:ae:ae:1c:6a:91:cc:44:0e:92:45:
7c:5b:98:b5:6f:71:67:73:d8:fc:f1:0d:20:4e:93:
25:f1:1f:dd:7b:b0:2e:c5:b8:77:bd:f5:34:eb:13:
4e:1c:1e:1a:cd:69:58:44:21:df:1a:a3:f6:a4:af:
b2:a8:a2:08:6d:53:0c:c8:13:4c:a8:5d:da:27:72:
47:22:c3:20:f4:67:7c:93:ed:94:0a:f2:2f:df:ee:
94:ea:95:d3:64:3c:23:a7:68:04:42:ad:38:72:de:
35:65:1c:fa:57:33:bd:b2:e7:c6:bd:2d:36:90:fb:
f7:5d:22:24:63:bc:0f:be:50:41:ad:ed:ec:a5:1d:
1d:e7:cc:9e:26:d4:40:3a:f1:32:4e:3b:91:d0:69:
59:40:5e:6b:e1:4d:49:2c:ba:9c:25:27:af:44:14:
c1:ae:76:d4:7b:88:d8:57:f4:37:82:9e:ec:dc:a0:
03:99:66:db:28:70:1c:c7:63:99:6d:8f:4e:39:92:
a8:5d:9b:00:8d:15:c1:0e:1f:d2:7d:a5:dd:e3:8c:
0a:cf:62:d9:03:64:7b:dc:c9:2f:48:f5:64:7b:68:
6e:c8:76:f1:df:46:46:c3:d5:22:f2:2d:08:cf:cd:
e8:ca:23:f1:2c:34:f0:7d:3a:0d:49:17:3a:32:49:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:3B:D3:8D:78:8D:4B:2B:24:A6:AD:BE:FF:13:78:9D:C8:97:18
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:22:fb:ff:dc:f8:85:4e:01:5d:63:6c:36:9d:58:0c:46:
40:c3:9d:b3:9d:23:3e:72:d4:84:3f:71:02:dd:69:23:48:1d:
93:2f:57:09:3b:16:13:8d:2f:3c:e0:c2:86:1c:ec:ea:5e:4a:
c7:9d:03:0f:43:a4:10:bd:85:81:8a:c8:e7:59:1b:f4:ed:e7:
d7:25:73:d4:43:f2:3a:fa:77:72:65:fd:06:66:e6:f0:e2:74:
31:a5:d8:a7:66:88:84:e6:49:83:d4:aa:b8:e3:6a:92:7e:84:
25:88:54:b7:54:5d:e7:80:5e:7e:fc:19:10:8c:7f:55:1c:b7:
e4:e0:d2:27:94:99:26:d9:09:58:b3:d4:71:89:fc:32:54:ad:
f9:ce:43:c6:4f:8a:b6:6b:48:30:18:59:e5:ff:21:f8:7c:55:
06:1a:b9:27:67:84:1a:06:27:d1:d4:2e:8c:db:56:8d:2a:8a:
4d:21:cf:fd:6e:82:11:0e:2d:6d:f6:ae:73:0e:98:0e:87:f7:
f3:3e:e3:c3:9d:ab:48:4d:3b:e8:75:c2:6f:b0:d3:b6:d1:00:
48:c3:21:ae:8b:9e:f9:3a:3b:9f:96:68:05:09:a3:65:6f:68:
8c:2c:68:4b:1e:79:2f:f0:0c:8c:eb:81:42:93:3b:a7:34:10:
e8:54:23:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxILKxnFnyU3iXSzHzODUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMmI0OGY2NDM1ODAxMWM3ODQyZDNjZWM1Y2IyZDQ3MDY4
YjgzNmQwHhcNMjUwNjA3MTkwMDU5WhcNMjUwNjA4MTkwMDU5WjAzMTEwLwYDVQQD
Eyg2NDdmM2JkMzhkNzg4ZDRiMmIyNGE2YWRiZWZmMTM3ODlkYzg5NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMo0CK6uHGqRzEQOkkV8W5i1b3Fn
c9j88Q0gTpMl8R/de7Auxbh3vfU06xNOHB4azWlYRCHfGqP2pK+yqKIIbVMMyBNM
qF3aJ3JHIsMg9Gd8k+2UCvIv3+6U6pXTZDwjp2gEQq04ct41ZRz6VzO9sufGvS02
kPv3XSIkY7wPvlBBre3spR0d58yeJtRAOvEyTjuR0GlZQF5r4U1JLLqcJSevRBTB
rnbUe4jYV/Q3gp7s3KADmWbbKHAcx2OZbY9OOZKoXZsAjRXBDh/SfaXd44wKz2LZ
A2R73MkvSPVke2huyHbx30ZGw9Ui8i0Iz83oyiPxLDTwfToNSRc6Mkl3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR/O9ONeI1LKySmrb7/E3idyJcYMB8GA1UdIwQY
MBaAFLsrSPZDWAEceELTzsXLLUcGi4NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODIt
YzUyMjk4NjNhZWJhLzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNjZiNmItY2RkZS00MGNiLWExODItYzUyMjk4NjNhZWJh
LzEvdXl0STlrTllBUng0UXRQT3hjc3RSd2FMZzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZAi+//c
+IVOAV1jbDadWAxGQMOds50jPnLUhD9xAt1pI0gdky9XCTsWE40vPODChhzs6l5K
x50DD0OkEL2FgYrI51kb9O3n1yVz1EPyOvp3cmX9Bmbm8OJ0MaXYp2aIhOZJg9Sq
uONqkn6EJYhUt1Rd54BefvwZEIx/VRy35ODSJ5SZJtkJWLPUcYn8MlSt+c5Dxk+K
tmtIMBhZ5f8h+HxVBhq5J2eEGgYn0dQujNtWjSqKTSHP/W6CEQ4tbfaucw6YDof3
8z7jw52rSE076HXCb7DTttEASMMhroue+To7n5ZoBQmjZW9ojCxoSx55L/AMjOuB
QpM7pzQQ6FQj2g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:46 2025 by rpki-client