Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File: UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier: aZhVtHwIiUecBv6waH57xpcAkEMRRIQhnlKG1hrQmIs=
Subject key identifier: F8:B9:6E:89:D0:A6:F2:BA:76:35:FD:DE:F8:61:B2:B2:0B:56:48:34
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial: 0197771C63C5F94D31FBA2093985D1FBF630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number: 65
Signing time: Mon 16 Jun 2025 05:00:38 +0000
Manifest this update: Mon 16 Jun 2025 05:00:38 +0000
Manifest next update: Tue 17 Jun 2025 05:00:38 +0000
Files and hashes: 1: 7vKO7KJon2U-PLT4fG2hAFvhGko.roa (hash: zjVmGhrF2p6uK4Xne1JZdTjHYFdY+pPfwr5U6yqo03M=)
2: EdaEcdzfZKUU8pzTsayBRrh8XNY.roa (hash: O3+hPZUQsLmn/0ZqbZYW7yg/F0HNHy5aqWBZDmT4tfM=)
3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: mWOfLyrsB7+4X7k6Krll86t2UXq06BJS5C7OUMEUPkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:63:c5:f9:4d:31:fb:a2:09:39:85:d1:fb:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Validity
Not Before: Jun 16 05:00:38 2025 GMT
Not After : Jun 17 05:00:38 2025 GMT
Subject: CN=f8b96e89d0a6f2ba7635fddef861b2b20b564834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:74:81:a9:25:f7:e6:c1:1a:8b:2d:a9:e3:
05:0b:ee:1d:d6:1c:45:d0:79:0c:45:6c:cf:e4:1c:
e1:ee:7d:68:76:4b:bc:5b:9c:68:63:4d:78:f4:ce:
73:de:d1:d5:5a:cb:ba:18:49:8e:60:4d:3a:38:f1:
da:a4:af:c0:9d:c8:2d:21:33:c7:71:a7:1b:8e:22:
f8:b4:2f:e5:a5:2c:db:a5:34:e4:64:26:57:2a:22:
42:fe:24:17:6a:83:2a:18:46:9a:4e:89:67:8b:6b:
2d:2b:13:d1:0e:76:ae:e1:d5:89:f8:78:22:e9:80:
90:54:8f:c1:92:46:21:b8:63:72:6e:47:f6:db:ef:
43:84:c0:18:9e:ca:19:3a:12:2d:12:71:e1:0f:39:
61:52:a3:ae:99:8f:1e:6a:bd:20:0c:d1:be:8f:81:
32:d7:7b:b1:fa:20:5f:4d:a3:42:4f:18:aa:80:19:
dc:10:33:b0:4d:8b:5b:f0:ba:d0:ef:eb:9a:c1:73:
bf:20:48:d1:62:f1:18:bb:ef:be:aa:a9:dc:73:78:
35:52:11:0a:3b:43:bc:62:dc:b0:60:55:9b:1b:36:
ae:cd:0c:c0:1e:e2:77:01:06:71:48:5a:0f:de:c1:
7f:6b:ae:94:9e:51:6a:f6:49:45:51:e7:d8:93:ec:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:6E:89:D0:A6:F2:BA:76:35:FD:DE:F8:61:B2:B2:0B:56:48:34
X509v3 Authority Key Identifier:
keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0d:e8:10:25:6c:d8:b4:4f:6b:ae:71:08:da:d9:79:31:be:
f9:34:f3:5a:68:88:a6:71:b9:35:52:d5:bb:00:9d:1a:c4:bd:
73:8b:b7:8b:05:d6:a4:e2:73:0f:79:7d:75:ee:03:ac:1c:ec:
d5:85:70:41:24:96:93:4d:a0:ef:0e:c5:ed:68:7d:05:c4:0b:
5b:b7:a5:52:e9:e1:05:9f:d2:2c:3b:d8:d9:63:89:76:db:52:
81:7b:17:f6:0d:63:9b:fe:2b:2b:59:1e:91:5a:87:72:42:5b:
64:c1:fc:1a:6e:d5:a9:3d:55:68:1d:5e:2b:b0:96:84:8b:84:
ea:92:10:16:0a:7c:10:2f:5d:99:b7:24:ec:be:7f:de:68:18:
71:b5:d9:46:d4:a1:b5:75:29:ba:db:5d:be:92:c3:46:61:46:
43:ba:e2:4c:54:54:9f:04:f1:ac:f4:36:59:c0:0d:2c:c5:a4:
1d:98:45:75:87:4d:66:0c:90:92:c7:8c:c1:11:fe:8d:50:a8:
d0:e4:12:be:a5:0a:d6:71:d6:ca:9f:65:85:3d:8f:19:6f:25:
ab:a4:7b:aa:d8:f5:6f:e9:d0:48:60:a7:e7:ae:e3:df:23:80:
70:f6:90:b3:b7:21:94:7d:e3:cb:0f:3b:1e:32:32:bf:55:65:
29:ce:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:22:08 2025 by rpki-client