Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: QvpAfQ5dC9XW7c57GKpDpQNm/UYdLGyPPgqy5VbqScU=
Subject key identifier: 0D:00:0F:C9:9F:94:D6:9A:FD:DD:73:13:C8:2A:FF:B5:C5:03:A2:3B
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 01976A3CF48F0F2F9D701FB1A2C40960BF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 17:01:09 +0000
Manifest this update: Fri 13 Jun 2025 17:01:09 +0000
Manifest next update: Sat 14 Jun 2025 17:01:09 +0000
Files and hashes: 1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: UnSoDIgwr2ncz9UwAilfydbJ8Fux5Y3p+8BWquobpaU=)
3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:f4:8f:0f:2f:9d:70:1f:b1:a2:c4:09:60:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Jun 13 17:01:09 2025 GMT
Not After : Jun 14 17:01:09 2025 GMT
Subject: CN=0d000fc99f94d69afddd7313c82affb5c503a23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:14:0e:0d:7c:e3:cc:a3:50:f2:6a:0d:e5:
59:ff:1a:20:8b:d8:4e:dc:09:b7:1a:89:96:df:b4:
eb:7a:fe:30:73:75:6c:aa:4d:01:60:9a:34:63:39:
fb:7a:5b:b4:7f:43:83:cb:b6:cd:60:1b:3e:34:96:
cf:63:f0:05:4b:22:b1:4c:57:24:0c:ba:82:e1:1e:
77:a3:f8:77:60:48:ff:87:28:92:10:c3:80:6a:da:
2c:6a:e0:bc:4d:c0:ae:87:37:5f:72:4e:d5:17:04:
14:df:ef:4e:6e:8c:5f:83:5a:94:70:05:fc:fc:54:
4f:06:12:f6:36:71:8b:0e:e3:32:2c:fe:1b:80:0a:
00:28:a8:ed:10:62:6f:88:d5:18:9b:2b:1a:27:43:
21:38:0a:b2:35:17:6a:03:a8:22:36:20:fe:2c:5b:
49:77:c0:c9:b0:76:1e:7f:b5:ae:63:ef:53:0b:7c:
a4:80:60:26:2a:e2:d7:3c:99:4c:67:d1:b7:98:58:
fb:32:3f:bc:a4:71:90:d7:2b:39:8f:47:59:84:7a:
74:0d:04:b0:52:5a:0d:26:bb:58:3a:f8:d9:8b:73:
65:de:19:bc:5b:9e:a4:ab:62:ad:74:1c:bf:f1:14:
1a:3a:93:88:8d:de:18:ef:cb:0d:75:34:ec:8c:d8:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:0F:C9:9F:94:D6:9A:FD:DD:73:13:C8:2A:FF:B5:C5:03:A2:3B
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6e:8b:ea:ae:a8:c0:72:e8:e5:64:8a:0b:1c:88:f0:f5:c8:
6d:1f:4e:36:5b:05:af:58:a0:8b:7c:f0:c1:c8:5e:34:87:4c:
b6:8d:85:43:36:2d:40:fa:ac:b8:80:16:cb:4c:f8:cb:21:91:
6e:2b:b3:8d:9d:b8:13:65:86:81:96:27:35:77:9d:aa:88:40:
ef:14:95:c1:59:ea:fb:26:e4:f9:fa:bc:a6:ea:2b:e9:60:0a:
fd:8b:c0:d7:d7:8c:8c:f8:fe:c3:d9:eb:d2:1a:79:d6:9a:cb:
a4:4e:9d:2d:9d:e5:eb:5d:46:3b:20:05:f2:c6:56:a3:c0:55:
cc:0e:75:e9:6f:64:a2:85:c0:5e:81:f4:56:60:df:00:02:c0:
27:e6:55:5e:a1:21:82:15:fa:8a:3f:d0:13:e3:c0:99:fa:5a:
ea:0a:24:ba:95:05:42:e0:04:f7:2a:53:d0:1d:33:00:51:f2:
fc:d1:7a:7b:14:42:2e:b4:c4:ab:60:33:56:1c:03:e0:a5:3e:
87:55:c7:54:5e:bd:67:89:00:a9:be:b2:62:c7:51:e7:dd:ea:
63:7c:12:74:7d:fd:23:7b:6b:10:5a:f3:ef:c7:8b:0b:7f:a9:
ba:30:83:fb:f5:4c:88:64:cf:53:5a:f7:fc:f7:5f:de:80:f4:
2d:55:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:20 2025 by rpki-client