Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: kHnhEzMHO/kj4mUn45Pb2y3Wlx0jMe7B62h0uwBLeSY=
Subject key identifier: ED:B8:7F:2E:6D:F0:53:9D:9E:AB:8A:5D:46:FB:E4:7F:97:73:5D:06
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 0197609517EF325E262C812367966CA5342C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 20:01:13 +0000
Manifest this update: Wed 11 Jun 2025 20:01:13 +0000
Manifest next update: Thu 12 Jun 2025 20:01:13 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: y6PGHdzgpN2y/g+sVpqSsw8qxWlulNhrZhijS3XWpXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:95:17:ef:32:5e:26:2c:81:23:67:96:6c:a5:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Jun 11 20:01:13 2025 GMT
Not After : Jun 12 20:01:13 2025 GMT
Subject: CN=edb87f2e6df0539d9eab8a5d46fbe47f97735d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:c9:e6:0b:c1:54:3e:07:e0:e6:01:30:e3:
94:47:ac:9c:64:d6:ba:58:ee:46:df:3f:24:2b:58:
78:53:12:4a:37:b2:7e:f3:8c:3e:86:83:7a:73:79:
80:39:74:c6:78:70:a5:c4:d9:8b:92:47:5a:90:d3:
3f:d8:e9:39:a7:4b:e9:c1:c3:bb:3f:6a:35:a7:4b:
a8:34:d1:91:bf:35:ac:d4:89:0d:51:a3:6d:fb:fc:
6b:0f:e7:f2:02:b6:48:3a:4a:2d:b5:f3:f0:e6:1c:
e6:8a:3b:50:44:65:ea:d5:0d:0e:25:9c:36:8b:75:
07:08:57:88:87:bd:ac:a1:8d:18:b6:38:3f:d3:6f:
4f:19:fa:c6:c7:a7:33:19:9a:89:3e:86:03:f6:46:
f5:4f:9c:b0:60:f9:2a:28:55:04:1b:bd:18:8c:9e:
d9:b4:d5:96:64:cd:c3:1c:29:95:b1:cc:c4:08:a2:
e3:be:fd:d5:c2:11:b8:dd:3e:b6:8d:d9:3b:e0:76:
76:4e:a2:aa:30:72:8c:0d:43:ae:2d:91:8f:ec:f4:
e7:01:96:80:13:54:0a:3a:cd:8f:dd:c3:1f:fb:45:
01:8b:c4:62:ed:d1:68:18:59:dc:77:5d:83:39:41:
8d:75:1f:5e:af:b7:10:9a:0b:c1:85:05:9d:c1:9f:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:7F:2E:6D:F0:53:9D:9E:AB:8A:5D:46:FB:E4:7F:97:73:5D:06
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:6a:1c:8e:bf:31:2d:9d:65:12:dc:5e:ad:98:56:0a:db:
55:9f:3d:b3:7a:09:93:db:52:4e:25:29:37:40:0b:be:e3:a7:
3a:c8:49:a8:fb:79:0f:32:96:e2:5d:6e:6a:aa:d0:d4:8d:e7:
b4:e5:0e:23:05:6a:92:e2:a6:b2:8c:52:1a:ae:aa:d6:2f:a1:
e8:7a:1f:42:c1:78:63:c2:95:63:e0:6c:10:34:cb:fc:bd:ea:
ca:97:0e:4c:dc:d0:d9:88:95:c3:ae:bc:05:da:b1:98:9b:55:
12:5d:e3:01:95:02:1a:37:c0:95:05:1d:fc:91:eb:a5:29:11:
c9:bb:d3:98:7d:25:65:3c:bd:f4:21:63:d6:7b:4f:fc:ae:8e:
f1:cf:70:6d:15:35:ef:b2:99:ff:b3:36:7d:fd:81:c5:02:c5:
8a:e4:b6:be:c1:81:83:52:13:0e:a2:f0:3b:ac:c4:d6:f5:bb:
a7:6b:25:a5:0c:c4:59:74:29:56:fc:5f:f8:bd:5a:8b:90:8b:
ab:da:7e:1f:c1:ca:81:59:46:67:e4:bf:3f:72:1f:c7:70:e8:
3c:44:8e:27:bb:e6:64:cc:cc:9a:0a:dc:50:15:9a:57:f7:80:
e4:04:5d:18:92:8c:25:97:4e:cf:04:d5:23:4e:92:f0:b5:ab:
d2:57:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:41:37 2025 by rpki-client