Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: dLQoTijiVGl3KCsrsJCWQLUa42BKNLi/becAyExlGx0=
Subject key identifier: 4C:BC:3B:C0:9B:97:C4:C2:0E:1B:A9:96:98:63:9F:96:23:D0:06:81
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01977C0BC70A6B3DAA18B4047FF48FAE4CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1569
Signing time: Tue 17 Jun 2025 04:00:35 +0000
Manifest this update: Tue 17 Jun 2025 04:00:35 +0000
Manifest next update: Wed 18 Jun 2025 04:00:35 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: UDs2N/wRm35vTSft9Vlb6lhbXoiLYvIjxepwbwfZlY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:c7:0a:6b:3d:aa:18:b4:04:7f:f4:8f:ae:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jun 17 04:00:35 2025 GMT
Not After : Jun 18 04:00:35 2025 GMT
Subject: CN=4cbc3bc09b97c4c20e1ba99698639f9623d00681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:e3:b3:86:e7:f7:84:2b:78:20:1a:92:20:
35:72:fd:11:33:01:da:80:79:50:30:23:a6:1d:21:
f0:75:99:0b:59:42:64:84:55:d7:2a:92:2b:5e:48:
1e:5e:2d:70:0f:a7:0a:32:51:85:8c:ef:22:35:41:
4b:a4:0b:b6:25:97:9c:d2:1b:48:ca:63:10:ca:28:
ff:aa:34:a6:7a:8f:82:51:e9:31:b7:6b:cf:8b:2f:
4a:ce:e7:35:db:48:98:ce:a3:1e:81:dd:c7:21:7f:
1d:1d:fe:ed:48:55:87:32:7b:f4:dc:ff:c1:9f:d2:
b7:63:97:a0:09:f9:48:54:c4:4e:75:f0:97:d2:83:
3d:42:c9:4f:ef:1d:80:dc:cb:c6:fe:7d:e9:be:6a:
db:90:8d:46:98:44:4a:b1:12:57:d1:e2:4b:72:76:
af:20:44:68:95:72:b4:53:10:a9:a4:49:9e:d1:9f:
d8:74:4f:09:7b:e3:47:c3:ea:25:c7:c1:62:10:6b:
89:22:fd:6a:25:0a:f8:64:79:1a:c1:f3:15:03:3d:
6a:e4:67:5b:02:2d:12:0c:30:dc:d6:18:17:fa:81:
46:d7:42:53:9e:45:a5:50:66:06:11:af:b7:b6:35:
93:59:c4:77:72:76:1c:db:14:94:67:be:20:8a:24:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BC:3B:C0:9B:97:C4:C2:0E:1B:A9:96:98:63:9F:96:23:D0:06:81
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:92:82:13:0b:a5:42:11:83:d1:30:6a:0e:28:56:9a:b0:
54:b3:38:56:b3:51:fb:d7:31:60:07:28:cf:db:1a:26:08:74:
ef:c4:f7:ec:93:d6:fc:d9:91:8f:97:8d:37:0d:ac:d2:43:bf:
ed:43:72:7d:bb:9d:11:61:0c:eb:77:a6:8b:78:0b:b8:d2:61:
ef:40:0b:6e:5c:3a:9f:a7:ef:66:f0:04:fc:b9:3b:be:0b:36:
68:c5:83:3a:89:ac:3f:2c:e7:24:58:c6:8a:dc:e3:3b:07:22:
fd:26:d5:5f:fa:f8:f5:8a:5c:91:c9:3a:61:7c:85:df:e3:ec:
85:2a:89:5e:8f:f4:39:94:26:f8:9e:75:d8:7c:2b:e9:97:d7:
74:d2:c2:33:09:4c:91:d8:b0:1c:09:e9:be:93:c6:24:fb:47:
55:f0:34:32:71:dd:8f:00:ad:bb:c4:39:81:74:38:7f:df:5b:
26:73:3c:76:c9:f0:fc:4d:ec:43:78:40:25:36:bb:62:99:31:
d4:ea:7f:88:6a:0d:67:bf:72:8d:a8:66:6f:47:36:b1:e9:e9:
31:74:1b:78:73:63:bf:39:ea:8b:0b:55:51:d5:45:0e:bc:e3:
35:03:11:f3:d5:1f:fc:7a:f2:e2:c0:14:e7:85:e6:63:87:43:
c8:5a:f7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:11 2025 by rpki-client