Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: 42CIciiVz3byo2zDgKv/NGYKcPXe7wt3llgtJfX9zbQ=
Subject key identifier: 52:DA:C3:0F:40:E1:EF:12:87:8F:33:62:7B:08:DD:BB:EA:0E:C5:ED
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 01976997D961235A42DF77EC5711C78D05C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 040A
Signing time: Fri 13 Jun 2025 14:00:48 +0000
Manifest this update: Fri 13 Jun 2025 14:00:48 +0000
Manifest next update: Sat 14 Jun 2025 14:00:48 +0000
Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: j46a9cU4RSZ0IX1mJB6fUOFBytPBdNoeQBedqiw6yNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d9:61:23:5a:42:df:77:ec:57:11:c7:8d:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Jun 13 14:00:48 2025 GMT
Not After : Jun 14 14:00:48 2025 GMT
Subject: CN=52dac30f40e1ef12878f33627b08ddbbea0ec5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:59:9b:74:6a:18:6b:6e:e8:74:ea:e1:b3:
1c:c6:c7:07:b9:0c:ef:3b:e8:ab:20:9b:64:2d:53:
af:b7:df:08:dc:5b:e2:d2:53:4a:0b:29:88:97:27:
16:8e:84:6a:6b:ed:19:b5:aa:43:b3:f9:37:42:23:
4b:07:68:14:82:f3:5c:08:de:5c:b8:30:7b:3f:17:
46:b8:db:70:53:20:e1:bd:1d:38:20:cc:5b:85:1f:
57:fd:50:1c:fb:f6:58:11:db:c4:92:9a:ed:a4:87:
f4:90:b7:54:54:fa:bf:d7:5a:e1:e7:f4:e1:05:6b:
14:25:e3:46:af:20:bc:c8:1d:1c:e9:48:4c:b0:9b:
b4:8c:d9:24:25:38:a2:7b:89:d3:9d:0f:3b:e2:da:
94:43:e2:c0:cb:a5:49:3d:b0:c5:40:cd:43:dd:5a:
31:9f:6f:f7:7f:c0:fc:f9:cb:bf:ae:73:6c:8a:97:
2f:2d:d6:19:e7:83:2d:78:04:62:af:bf:65:1c:17:
0d:87:61:5d:b9:d4:58:eb:a7:e2:09:ca:79:60:17:
ce:b9:f1:91:74:f8:e1:22:b5:59:03:8e:57:db:55:
e9:83:2f:56:96:27:b4:9c:8c:9e:87:db:58:cd:99:
2b:2e:90:2a:41:90:8f:43:db:71:59:9e:d0:a7:8f:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DA:C3:0F:40:E1:EF:12:87:8F:33:62:7B:08:DD:BB:EA:0E:C5:ED
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:13:7e:06:65:7c:b6:d7:9c:d0:0c:f9:72:ea:7f:30:db:aa:
00:dd:62:8f:88:b4:6d:69:38:bb:c2:b7:ad:60:5c:fb:7d:79:
25:e4:13:28:4c:90:19:3e:a6:4e:0e:ad:7f:42:81:95:bb:53:
22:ca:7b:0d:13:34:67:e0:14:44:e2:86:83:7a:90:d5:00:a7:
29:ed:42:93:2d:da:b3:32:9d:cf:6b:2a:97:c7:d0:a8:4b:8d:
af:4f:66:25:40:5f:e2:4f:6a:23:cf:0b:7b:b8:23:be:01:a2:
c4:42:f1:57:b6:d2:4d:67:60:c9:0b:89:39:c0:d4:48:6f:6e:
71:5b:1b:50:3f:1a:fe:f6:07:45:f6:90:a5:4e:04:70:36:9d:
36:99:19:26:e0:39:d7:8a:33:b2:31:09:4c:42:a6:f1:e5:ae:
8d:46:8a:4f:68:08:89:9d:12:0e:10:ee:4d:9a:54:2b:72:76:
9f:44:65:ce:d4:e1:fe:cd:bf:91:2c:ea:5c:c2:d5:e5:0d:f6:
d4:fb:e0:96:b2:bf:ac:a2:05:94:59:d2:42:82:d9:10:75:2a:
1e:47:2b:05:01:a4:c9:c5:6a:ec:75:d4:95:20:6a:17:ec:a8:
9f:40:d4:1a:63:fd:8a:a8:0e:5d:37:ef:18:c8:86:28:30:47:
c8:d5:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:24 2025 by rpki-client