Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: OpXFd7lsDaSl7V2FoaDVeUpztzdSJC7og1qdlI2I2d4=
Subject key identifier: 49:41:12:99:20:83:DA:AF:AB:87:13:E2:91:84:7A:E1:22:5C:38:93
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 0197711AE426E84BAB67A327087937FED583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0D14
Signing time: Sun 15 Jun 2025 01:01:17 +0000
Manifest this update: Sun 15 Jun 2025 01:01:17 +0000
Manifest next update: Mon 16 Jun 2025 01:01:17 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: xwd/afRB9ONaG/+xfMqt/tmPp9klQLzk7X5BnMZNuf4=)
2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:e4:26:e8:4b:ab:67:a3:27:08:79:37:fe:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Jun 15 01:01:17 2025 GMT
Not After : Jun 16 01:01:17 2025 GMT
Subject: CN=494112992083daafab8713e291847ae1225c3893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:2e:fe:50:74:77:8b:4b:29:de:c5:b8:11:
97:73:93:09:af:0c:ad:64:63:47:bd:48:c9:bb:66:
49:65:12:44:98:29:d1:3a:b4:82:a5:04:bc:ca:e4:
31:3d:c6:ea:1e:a1:40:99:1c:ce:b4:8e:6c:73:fa:
eb:ab:82:d1:8a:9a:16:47:09:b7:a8:22:1a:2a:00:
a5:2e:6c:91:5b:18:a8:95:d6:c0:a4:de:55:cb:26:
87:f0:ac:e9:1f:e7:fc:4a:bf:70:1d:19:55:32:4a:
df:c1:95:b8:72:09:2d:a4:79:1e:ed:79:90:b4:bd:
bd:cd:6b:b6:8e:b4:2a:7a:63:d2:0f:29:58:0c:ed:
fa:84:38:80:97:98:e0:36:a5:70:82:b7:97:a0:6b:
4f:08:4f:5d:55:61:db:b3:b0:ea:ad:ed:a7:33:21:
b0:6e:af:aa:b4:29:f9:8e:33:55:cc:74:e9:0e:22:
76:74:db:df:34:2f:37:d1:9e:75:9b:16:d9:ee:9a:
52:63:13:d7:5d:be:6a:75:1f:c2:dd:54:5b:44:f4:
51:76:f8:29:ac:9d:65:d4:e6:a4:c5:ab:6f:0f:85:
76:95:87:82:9e:b0:f4:a3:a9:f0:a4:7a:f0:33:de:
89:02:11:49:f4:31:ff:5c:3f:91:67:02:d9:5f:f8:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:12:99:20:83:DA:AF:AB:87:13:E2:91:84:7A:E1:22:5C:38:93
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:a8:64:c6:43:8f:28:db:9e:6d:c6:dc:83:7f:cc:ac:dc:
d2:2f:1b:a9:54:5a:4f:da:75:c4:a5:5f:f0:2c:3d:f3:3c:81:
a0:47:1c:72:68:84:4e:c4:a5:b8:18:dc:95:64:41:23:e7:db:
44:a5:84:8e:71:d7:09:d5:53:5b:29:fe:11:a8:1b:cd:c1:75:
f8:6f:24:b3:e8:4b:31:5c:1f:49:45:20:5d:c3:e8:bb:e5:fd:
cb:05:a9:34:a5:c3:48:6f:3d:1d:6b:01:eb:7d:f5:fd:1a:46:
95:9e:bb:de:1f:e1:5d:fc:ca:6d:5d:6b:4f:37:16:9f:7d:ec:
62:6c:b7:ae:ad:38:3b:38:34:a1:bf:4e:0d:0d:01:f3:48:ec:
db:54:e1:8e:d2:ad:e4:6e:82:6e:c6:64:ad:68:7f:e1:39:25:
50:61:3f:31:a5:b9:40:b9:ef:66:11:93:e4:d9:c7:bd:71:4a:
d3:fd:7c:57:4b:65:97:f5:7a:0b:14:ab:ce:b1:2f:ca:88:81:
56:6a:02:48:e5:de:51:31:69:1f:68:8a:ca:af:c4:6d:80:0d:
d2:e2:71:25:7c:c6:dd:e3:7e:7d:6c:dc:25:cf:26:68:69:6e:
97:ee:cd:8f:50:0e:54:23:80:3d:1b:8a:cd:35:48:fd:ea:d0:
a8:b7:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:52 2025 by rpki-client