Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: a3Bnt17beMirHjT93BwTe6kbJ+Ov7ytVoyAKtJuQLhg=
Subject key identifier: 8B:90:6C:11:E0:3C:4F:9C:92:9A:76:D4:61:63:07:AE:F7:02:47:EB
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 01976C98C809C6C04500E50F704EA91212FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:41 +0000
Manifest this update: Sat 14 Jun 2025 04:00:41 +0000
Manifest next update: Sun 15 Jun 2025 04:00:41 +0000
Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: Q+f+AhnqOXs63SJ8U2PedVDolC+SwsspB1kGSGHWojs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:c8:09:c6:c0:45:00:e5:0f:70:4e:a9:12:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Jun 14 04:00:41 2025 GMT
Not After : Jun 15 04:00:41 2025 GMT
Subject: CN=8b906c11e03c4f9c929a76d4616307aef70247eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:87:94:0b:a8:71:f8:bf:db:35:6e:c4:6b:
89:4b:68:63:14:20:41:20:e7:ec:42:33:a2:87:8f:
02:8f:db:34:80:7f:87:15:5f:8e:44:68:1a:c8:95:
2e:fd:03:23:12:da:59:b5:3a:68:f0:95:34:a9:db:
63:52:37:fd:8b:09:d6:55:a0:9a:26:b0:03:f6:4a:
a3:a4:e4:1a:fb:f6:0a:1c:74:96:7c:09:c5:8c:98:
1f:5d:70:b0:91:16:52:24:3b:60:93:b2:1a:01:d5:
9b:31:77:e6:c5:85:ae:37:67:cf:4d:e3:1e:e1:89:
0e:91:27:0f:f3:48:4e:b6:56:31:39:8c:0a:e1:21:
37:65:55:ba:59:23:8c:fb:e3:e2:78:af:d3:33:d3:
1c:b0:7b:91:af:17:08:19:da:71:f7:3f:97:3b:58:
85:07:f2:6d:a0:87:b4:3e:57:a3:3c:a3:93:c6:36:
fb:c4:d5:67:dc:db:21:b5:98:4d:b4:ea:1b:60:86:
f6:4b:c2:6e:e7:9f:f8:6d:c6:30:1c:f7:c7:b3:cb:
a8:da:51:37:f4:34:73:4d:db:23:16:98:18:8f:37:
3c:fa:3f:02:75:91:b6:eb:cb:cc:8a:cc:8b:63:6c:
31:b8:40:80:e5:3d:1c:a4:7d:93:05:7e:02:f4:18:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:6C:11:E0:3C:4F:9C:92:9A:76:D4:61:63:07:AE:F7:02:47:EB
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f8:e6:f9:76:a6:3e:30:53:8f:9e:4b:d9:42:fd:88:e9:67:
c4:da:2a:c0:3f:fc:14:81:8b:aa:f9:1f:30:6e:82:62:2b:c8:
51:62:18:c8:e3:a4:6a:2d:99:31:af:61:2c:e8:31:bc:b8:90:
f6:fe:e6:7a:e7:0b:b3:9e:bc:cb:6c:a8:92:b8:25:9e:9f:bf:
82:8c:71:6e:25:aa:f2:61:14:da:67:ef:f3:fc:c0:61:19:ec:
9f:41:5a:a1:4d:a3:57:db:e7:7a:08:4e:8b:ec:f0:e4:1d:71:
34:a5:4c:56:1c:2d:8c:8c:6c:c9:6b:b9:59:63:12:c1:d9:62:
2b:42:ce:2d:42:5a:a7:98:df:0e:4c:90:f4:54:04:a2:9c:cc:
fb:52:ea:2f:50:80:eb:65:e7:c7:78:18:16:cc:f7:e4:d4:cb:
8f:56:9a:d1:fb:0e:87:11:d7:93:d5:9f:71:6d:a2:82:1c:37:
e1:8e:3a:7f:83:f5:cb:b4:e7:09:ea:22:6d:d5:fe:d1:24:51:
8a:d4:c4:cd:e2:88:3b:c3:77:db:96:a3:fe:3f:b0:6e:c9:0c:
dc:2b:16:b1:b9:6b:38:ee:0e:79:f6:be:f8:54:23:c2:6a:15:
59:32:08:ca:e6:21:06:b9:9f:36:57:9e:25:43:77:38:d3:1c:
a4:77:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:34 2025 by rpki-client