Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: mqs2Do7sRTAnU0GL4ucLqc3+VVJ2yEtehlNJq48cI9U=
Subject key identifier: 65:EA:67:50:2E:D8:54:DE:CA:DE:B5:52:1A:7D:03:DC:97:76:E4:30
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019746D4E638A4A55E3441407355D5F19365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0CE1
Signing time: Fri 06 Jun 2025 20:00:47 +0000
Manifest this update: Fri 06 Jun 2025 20:00:47 +0000
Manifest next update: Sat 07 Jun 2025 20:00:47 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: 8jve+V6Dgm65z4O0xxBSs7j2MVQ2xYzGCESF2+B6vzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e6:38:a4:a5:5e:34:41:40:73:55:d5:f1:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Jun 6 20:00:47 2025 GMT
Not After : Jun 7 20:00:47 2025 GMT
Subject: CN=65ea67502ed854decadeb5521a7d03dc9776e430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:5b:f8:e2:3f:02:eb:b6:cf:40:93:86:90:
b6:58:8d:0b:a7:f3:0f:43:3a:4c:79:c5:e6:ba:a4:
3c:03:d0:48:c0:2d:8c:a5:84:28:18:07:9d:f9:29:
01:ad:81:bc:59:d1:a9:7d:92:cc:7f:9a:4b:b4:1b:
0e:e1:8d:af:c0:19:f7:a9:c1:b8:b3:80:7e:a0:b9:
88:ac:76:0c:63:92:05:6c:8c:a2:f1:3b:38:ac:57:
28:2d:44:0f:64:2d:46:ac:a2:97:89:0b:20:1f:ac:
93:50:45:f5:b2:ba:66:ce:c1:1a:5e:c4:5f:e6:c8:
29:ae:3c:30:be:8f:33:d0:87:f8:71:84:0f:d5:98:
69:17:a8:7b:d4:6b:5f:b7:26:b5:12:8e:15:a1:c6:
f8:ee:b7:e9:97:3e:7e:4b:59:65:55:78:57:a0:10:
4f:2d:3b:f3:0e:37:92:31:1f:dc:72:00:4b:28:ae:
44:57:b2:6b:51:f6:d0:ab:e4:bf:32:e7:d9:24:09:
fe:5f:d3:9d:2f:55:a6:eb:f3:bd:d6:f7:c0:5f:33:
70:93:26:65:f2:f3:d9:dc:bd:27:27:df:2e:3a:7b:
aa:d4:47:15:d0:db:55:fa:17:d6:b4:12:c7:5b:7f:
86:e8:4d:3b:96:d2:3f:de:73:39:2c:95:9c:ed:75:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:67:50:2E:D8:54:DE:CA:DE:B5:52:1A:7D:03:DC:97:76:E4:30
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:86:53:55:08:00:32:5d:bc:03:85:58:90:3d:d2:4a:61:17:
27:05:1c:14:2f:7b:3c:40:71:24:9a:d7:b1:63:54:0c:57:0b:
1e:d8:b5:dd:13:03:4a:b3:56:ae:92:69:8b:fe:16:ad:6c:ec:
e3:69:36:14:be:ff:99:54:b8:02:d8:c1:aa:db:79:6d:5f:98:
48:82:c2:49:74:19:21:73:bc:93:b4:4c:30:29:87:67:33:d5:
ec:99:b9:f3:59:90:03:cb:93:61:27:a6:8e:9a:62:87:7f:69:
76:b5:d4:7e:17:92:aa:60:aa:2e:9d:a6:bf:b9:53:80:58:97:
95:61:96:55:d5:6a:c3:a2:5d:85:e6:52:ba:47:e5:2f:4d:e9:
3a:75:db:26:f0:67:07:da:f1:2b:0d:79:42:94:18:3c:35:26:
f3:01:74:e1:3a:b1:9e:4c:97:84:36:16:9f:c1:75:05:59:72:
c9:9e:11:1b:77:87:00:14:a6:3d:c1:b7:c0:6f:0a:c0:54:a5:
72:50:cc:10:32:42:e8:d6:03:35:21:a8:8a:45:c8:5a:ab:18:
9e:db:40:ca:9d:a1:ce:34:da:d6:a4:b9:42:13:16:32:6d:19:
69:ad:38:7f:d0:ba:89:a6:04:94:20:21:0e:8d:10:0b:85:bf:
4e:e4:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:02 2025 by rpki-client