Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: HXW8eLiIFM/XYZvVJ+j/0xmJxJY9NlRAuTmD6nYhwJk=
Subject key identifier: 8E:1A:71:19:79:7B:99:DF:AD:72:FB:86:2A:D7:3E:85:66:9C:EE:A1
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 01976F62F7B3902C2476DB5D2C9AC918669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 146C
Signing time: Sat 14 Jun 2025 17:00:46 +0000
Manifest this update: Sat 14 Jun 2025 17:00:46 +0000
Manifest next update: Sun 15 Jun 2025 17:00:46 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: 9X4JesilXizygX05+n8iQeQTlTME7oKS+j4QSCCONQE=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:f7:b3:90:2c:24:76:db:5d:2c:9a:c9:18:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jun 14 17:00:46 2025 GMT
Not After : Jun 15 17:00:46 2025 GMT
Subject: CN=8e1a7119797b99dfad72fb862ad73e85669ceea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:e9:c8:5d:c0:7f:a7:22:a6:1f:1d:c7:7a:
8f:30:74:09:5f:af:4d:21:d4:c0:f2:f3:90:e3:bd:
a4:78:39:10:9d:c1:d6:8e:f3:d1:02:9d:c8:78:7a:
af:b3:ba:2d:66:26:17:63:9f:8e:4b:16:01:db:1b:
e9:3b:d8:34:bc:a9:fd:22:21:60:ad:de:0c:14:83:
0f:c4:eb:cc:29:2d:2a:86:84:75:a9:45:61:32:af:
b6:fa:8e:c9:2e:1c:cc:2d:8a:fd:71:18:86:81:43:
f5:1c:7c:83:3f:5e:92:f8:90:f6:6d:5b:09:e0:39:
9d:21:93:fe:5b:07:94:cd:f3:16:82:a7:a3:7c:ca:
b8:6a:61:15:de:29:31:00:43:cd:57:35:51:7a:bf:
1a:75:3b:26:2f:41:76:00:58:aa:06:04:dd:ef:8f:
e8:ed:03:52:61:cb:ff:c3:33:62:71:56:9d:d5:25:
f8:c4:3d:8c:5a:94:3d:e1:6b:8a:14:b3:cb:79:2c:
af:31:92:c7:57:cd:12:17:db:5a:a4:0f:6f:fc:62:
71:e4:61:52:33:d4:41:53:12:6f:0f:a1:97:43:14:
c3:e7:fc:73:6c:37:7c:6d:6e:4f:40:dc:07:82:25:
87:88:e6:57:7b:24:33:12:96:f7:92:99:49:47:f5:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:71:19:79:7B:99:DF:AD:72:FB:86:2A:D7:3E:85:66:9C:EE:A1
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cf:04:80:5c:bf:27:ca:af:9b:8e:0d:2e:e0:c9:92:40:22:
ff:56:6c:ca:57:01:8a:02:8f:32:82:39:a4:8a:71:67:e5:9d:
fb:6a:d5:2f:c3:eb:de:d3:d2:f6:d4:24:db:a6:83:5b:ca:51:
6e:d7:ff:d1:df:e1:94:6b:a6:2a:65:24:7d:c7:d9:ab:7c:6d:
9d:96:9f:e8:2a:8a:33:08:bf:05:8a:d0:6b:ca:44:52:bc:8c:
b6:49:c8:51:bc:e1:3c:31:f0:c2:b8:15:e2:81:ce:85:52:55:
ea:9d:72:73:a6:06:3c:1e:88:e8:81:dc:83:9e:8f:77:b4:15:
0e:4d:2b:d0:0b:80:89:7d:39:28:df:8e:4e:01:ca:70:34:9c:
42:c9:ab:75:04:fa:a4:43:e8:d5:94:a2:7f:17:b6:84:fb:2a:
ca:a6:d4:b3:1b:2b:5c:dd:da:51:6c:3a:da:7a:eb:35:48:fb:
e7:00:25:e5:33:9e:ea:c4:4c:f7:00:19:b4:c6:ec:c6:7e:62:
f6:2f:f8:09:d8:80:b4:b0:83:f8:32:98:20:51:60:5a:b5:02:
f3:e8:68:8e:5b:dd:40:96:33:14:85:dd:0a:bb:1f:4b:48:d2:
10:fb:7c:c9:56:b9:37:3f:08:16:ad:86:30:a0:3b:65:82:80:
9d:21:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:21 2025 by rpki-client