Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: NEqPW9WiMx8isXp0HDZxjxNtn0Mb0ZADCbIj6o5loW8=
Subject key identifier: 9A:7E:30:BA:B9:01:85:A9:ED:9C:C8:6A:2C:36:00:78:0A:D3:24:00
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019769CE909C6C4B9D7E9BE980B70ABBAB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 03E3
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: dY35RsuVNVw2eTueZwzr5GSlLafxvs5EkXVw5QiYMLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:90:9c:6c:4b:9d:7e:9b:e9:80:b7:0a:bb:ab:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=9a7e30bab90185a9ed9cc86a2c3600780ad32400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:65:6b:03:3a:a7:0c:e5:b1:9e:90:be:c4:
b0:a4:b5:9d:ff:85:71:bc:f5:f3:ce:0d:8e:48:dc:
3c:0e:53:6a:25:f4:f5:e5:4d:34:b4:b1:f4:86:0e:
c8:7e:d5:bf:03:73:4d:df:51:fe:df:98:89:fc:8c:
70:c3:7d:19:73:f3:b3:85:48:6a:47:3d:4b:0c:88:
ac:ba:db:db:ec:b8:c9:9c:ee:01:46:ac:6d:1a:13:
b6:fa:75:4c:34:82:54:64:1b:8a:fa:bd:43:b0:4e:
99:8d:5b:2d:2a:5e:2e:e7:b4:be:ab:ad:1b:ac:af:
e0:8f:49:3d:c1:cd:8f:39:29:7d:e4:36:25:d4:db:
31:a6:e7:a0:d9:9c:4e:5e:0e:75:05:ee:cf:18:62:
a5:42:f7:ec:b4:4f:83:b9:2f:37:0f:3f:db:6d:c4:
2a:cc:21:a3:11:ef:dc:98:1c:b2:c8:1e:a4:c9:12:
69:69:28:69:98:ad:78:b2:81:b4:3b:50:3b:eb:f2:
be:a4:28:28:7a:30:f7:e2:7d:fd:19:80:09:43:7c:
01:17:0d:1d:b2:4a:2d:6d:73:c9:69:f3:c9:6c:88:
84:42:47:07:8f:2f:4e:49:67:06:c2:7b:6f:6f:bb:
4f:ee:af:8f:64:b2:b4:1f:61:1f:ae:5d:da:8b:da:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:30:BA:B9:01:85:A9:ED:9C:C8:6A:2C:36:00:78:0A:D3:24:00
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bb:81:68:29:c9:2c:3f:45:23:44:5c:7f:47:fe:f0:0a:b0:
c9:80:fa:e5:32:b5:93:81:ac:78:f1:1d:cd:ca:13:f8:84:51:
8b:a5:69:25:ea:25:25:2a:62:47:f3:83:9e:70:36:db:50:ee:
15:f7:19:a9:f0:bd:1b:8d:04:e7:28:ca:70:50:6d:41:99:f5:
a9:44:1d:2e:4c:2a:03:00:72:78:bc:e5:64:5f:88:51:9b:20:
65:09:61:4b:8d:e6:27:5c:7c:b8:67:1e:0b:38:38:68:0b:8b:
83:f4:db:cb:d3:17:97:fc:03:0b:25:42:98:20:2e:31:7e:7e:
ab:9d:c4:ed:fe:00:0c:17:62:c4:49:c1:64:d7:35:30:d2:2a:
15:d8:6b:42:04:bc:63:5a:d8:b1:87:d6:df:da:67:43:b3:9d:
e6:73:10:38:89:7e:d0:49:d0:f0:c2:58:8c:d6:57:dd:fa:0f:
5d:55:e4:97:7e:90:cf:eb:80:2c:ab:52:07:db:43:3d:aa:61:
14:11:c2:81:db:fe:76:30:a3:ed:b5:3b:30:f2:78:48:b1:6a:
b2:31:3a:38:47:bd:32:9e:5b:5a:36:c7:3e:d4:5c:75:83:69:
dc:ac:08:c3:57:99:c1:78:99:d8:a8:b9:91:1c:a1:81:e1:8d:
06:5c:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:22 2025 by rpki-client