Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: nACveB0qhbwRzXAlRKz65RC5NKGslobZJQMvjmR4iIE=
Subject key identifier: 98:B5:F4:6A:0D:EC:36:0A:D1:CF:E7:76:EA:49:54:A5:FA:9F:49:45
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 0197488C810CE45A761741D8D4CC2F0C5B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: JzB1/1rLl9WpvD8DcQ6mHYSUbck99FYywSHC9F0HNOg=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:81:0c:e4:5a:76:17:41:d8:d4:cc:2f:0c:5b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=98b5f46a0dec360ad1cfe776ea4954a5fa9f4945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:55:5f:a9:76:a6:fd:a6:9e:26:7c:3d:45:
95:51:ed:8a:2a:56:f9:c9:4a:63:89:19:a4:90:f1:
59:ac:0e:8f:19:ca:f0:6c:51:99:0f:0e:02:83:35:
a7:8c:76:78:c9:4f:03:0f:36:04:24:7b:4f:f8:1a:
91:5b:78:b6:db:a1:a2:2c:45:b0:5f:06:c0:7f:fb:
28:bb:65:9a:4e:f9:89:2b:ab:4d:62:85:a2:f1:e3:
f6:18:53:9a:49:02:38:f3:a7:bc:6c:f1:43:8c:02:
74:7f:ab:6e:e0:6c:22:54:80:01:f6:10:11:f1:02:
04:5a:26:df:48:fe:43:38:90:d3:8b:f4:34:31:71:
37:c2:07:d3:5d:eb:e8:4a:f8:a7:a1:48:f3:72:fa:
c1:5b:b7:45:37:5d:c4:aa:c3:98:62:fa:e9:1a:96:
be:85:0c:18:5a:e5:38:52:1a:16:ee:c6:34:3e:72:
16:74:3a:28:8a:9d:4d:75:28:f9:35:3f:ad:c3:01:
0d:d0:7d:f8:0f:86:a1:db:bd:f6:f7:bf:42:c5:95:
b8:f8:14:1f:84:aa:69:75:81:9f:59:44:51:3d:c5:
90:30:0b:9c:9f:8c:06:bf:af:de:50:69:e9:4e:57:
c5:05:3e:44:8f:84:fa:db:02:80:c4:27:43:ec:5e:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:F4:6A:0D:EC:36:0A:D1:CF:E7:76:EA:49:54:A5:FA:9F:49:45
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a0:6c:53:10:92:d3:0e:99:eb:39:a9:c5:df:ed:2c:97:01:
87:aa:36:d3:59:22:af:cd:5d:02:de:cb:ed:6e:57:07:15:54:
db:51:32:4a:13:38:05:6e:42:7c:ac:7c:88:e9:95:bd:03:1e:
eb:69:ff:1c:c8:50:2d:e9:7d:46:f0:95:47:9b:fa:a8:4a:64:
2e:35:78:6c:72:a1:65:c0:3d:e2:39:df:2e:cb:f1:4d:09:bd:
72:08:81:b5:b7:d7:6d:9f:07:4b:aa:53:b5:2f:99:9a:84:31:
19:d0:06:d0:c6:80:99:a8:3a:1a:48:8a:a7:30:5d:3d:e4:bc:
65:df:eb:04:73:be:4a:15:56:ea:a1:70:12:ba:06:ef:02:9b:
8d:d4:94:54:38:bd:d2:c2:de:be:00:a1:9e:32:7a:e8:25:af:
28:c4:0c:13:7a:13:ad:3b:64:b8:7c:a1:f9:b0:3c:d6:52:a2:
0e:0a:ef:2c:bf:da:51:e8:42:69:b3:79:31:b8:73:f9:2a:98:
10:ff:1d:72:85:d5:99:24:dd:e2:98:fc:51:6c:ef:93:12:39:
66:6f:55:de:de:79:9e:9c:33:8c:26:c2:36:bd:94:11:f1:7b:
2a:bf:fb:07:ed:65:e3:fd:11:f7:ce:1e:88:3e:a2:9a:81:2b:
07:51:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:57 2025 by rpki-client