Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: tBRo2mwXnQajY3l4XBfj92j+EElXAcsPHWwh2ZWfjBI=
Subject key identifier: 69:78:47:28:98:84:30:F0:C2:D7:B7:46:32:D4:E2:13:AE:74:86:1F
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 0197684E9B1EFFF632DC915B7217DCFE4BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 03D2
Signing time: Fri 13 Jun 2025 08:01:11 +0000
Manifest this update: Fri 13 Jun 2025 08:01:11 +0000
Manifest next update: Sat 14 Jun 2025 08:01:11 +0000
Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: D1N6lACaE8NKic5CKfKhwMhEwOhsPlGnzmQjiw+7rd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:9b:1e:ff:f6:32:dc:91:5b:72:17:dc:fe:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Jun 13 08:01:11 2025 GMT
Not After : Jun 14 08:01:11 2025 GMT
Subject: CN=69784728988430f0c2d7b74632d4e213ae74861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:09:5f:b8:97:c1:17:75:0d:da:2c:c3:a3:
12:d2:6e:83:68:77:ed:0e:8e:20:46:8c:dc:0c:e1:
a6:6a:05:72:39:8d:d5:65:4d:5a:37:13:15:34:d3:
a4:9f:96:21:e2:fd:35:24:fc:95:75:7b:25:ce:1f:
fa:ab:90:15:31:9d:36:a1:5b:6a:04:fa:11:98:45:
54:80:3a:4b:bb:37:d6:d9:d3:b1:8f:3c:2d:18:c0:
30:9c:8f:53:6b:bd:b0:e7:a7:f7:bc:c1:2c:29:27:
df:56:ab:f6:80:d2:6a:a4:e9:2c:55:e3:71:6e:77:
b7:ed:bb:03:06:17:dd:e2:23:5a:aa:65:b9:dc:8d:
88:71:80:4a:ca:de:e4:76:4d:90:96:49:2d:e6:73:
43:a1:4d:e6:47:61:9c:99:8c:cf:0a:d2:9b:9d:bd:
96:0b:96:6c:92:c9:9c:f1:a3:fe:6e:cf:5b:01:a8:
54:38:29:01:0d:27:0c:21:48:4b:94:9a:2d:d8:4d:
22:a3:dc:ca:90:a3:4f:bb:4b:32:ff:a8:50:43:6d:
26:8c:65:b7:50:86:5b:3c:7a:a5:ba:0b:06:5d:2a:
06:1a:62:6d:d7:6e:cc:60:f1:b9:31:d9:66:9c:1d:
fe:78:4b:c7:08:9e:41:10:88:ff:57:27:e8:13:1d:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:47:28:98:84:30:F0:C2:D7:B7:46:32:D4:E2:13:AE:74:86:1F
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2a:19:25:c6:c6:1b:d9:40:d7:b8:bd:cc:a4:ea:19:10:0c:
77:a5:72:d3:0f:d7:08:d9:98:57:31:4b:71:9d:19:f4:a9:65:
28:39:ff:b3:2e:c9:7c:7a:86:b0:46:a8:1b:02:ac:fd:11:98:
d2:34:aa:d1:30:6e:9a:db:9b:49:29:ca:d0:e0:af:7d:34:ff:
71:13:01:2b:ed:7a:c7:44:18:8b:72:cf:cb:35:48:ea:7d:eb:
18:a2:ea:04:50:2d:86:ce:1a:52:31:14:8b:7a:f5:d5:96:87:
28:bb:00:9b:42:34:63:de:36:90:47:d3:20:78:e7:be:e7:d5:
7b:1a:fa:be:62:a5:a0:f8:7f:81:7e:18:1c:8c:68:ea:92:3a:
7e:c6:62:f9:bc:3a:4d:cf:92:4f:a1:45:a6:16:ba:36:b7:94:
80:fc:eb:ab:95:70:5f:bc:2c:7b:3a:a4:0a:26:e0:12:9e:a1:
4e:b8:a4:4f:05:89:cc:0d:9d:3e:f7:2c:c7:e0:cc:3f:98:26:
f8:70:1d:dd:ea:9e:49:78:99:71:69:03:57:cc:c3:3e:89:71:
a5:a5:c8:40:95:b4:45:9b:33:59:11:cd:bc:ca:d5:9c:5d:38:
d8:74:83:8b:af:6f:20:bf:bd:71:ff:f1:9c:87:26:fc:eb:ee:
a4:e3:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:20 2025 by rpki-client