Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: qZ7NW9Lp4L51so7lW1MG5kZBJ9MvtzldXTiego38iBg=
Subject key identifier: A2:9C:30:07:F4:11:E0:FC:BE:81:86:AB:5F:F0:52:7A:CD:6E:85:EE
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 01976D06CCF6BF5ED74B4BFA7EA70BC49946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 025C
Signing time: Sat 14 Jun 2025 06:00:51 +0000
Manifest this update: Sat 14 Jun 2025 06:00:51 +0000
Manifest next update: Sun 15 Jun 2025 06:00:51 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: vaETV7qYERxeyk3p5jMiModByUy8AHaVIxm0tDlOcqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:cc:f6:bf:5e:d7:4b:4b:fa:7e:a7:0b:c4:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jun 14 06:00:51 2025 GMT
Not After : Jun 15 06:00:51 2025 GMT
Subject: CN=a29c3007f411e0fcbe8186ab5ff0527acd6e85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:e9:0c:00:ba:e1:fe:c6:98:43:f4:97:9d:
22:6f:4d:eb:3c:ad:22:c3:bc:0e:64:ab:cd:73:13:
14:4b:7a:00:ee:6a:72:d3:da:a3:44:97:06:59:14:
af:1f:df:b5:7a:43:44:2a:5c:4d:4c:9d:14:c6:7c:
29:9d:ed:3a:77:40:58:60:bb:6b:b2:9b:98:01:61:
69:28:f8:17:4a:2c:01:ff:7f:e8:f4:f2:6b:e4:c8:
d0:57:db:f6:ef:2b:7d:c8:73:b1:b1:b8:c4:e6:cb:
2e:af:c8:6f:c6:7e:05:70:bb:db:78:06:0a:51:fb:
f8:2f:ac:d3:db:67:4a:89:01:c0:7a:3b:98:4b:aa:
02:06:a5:11:d3:06:2d:0b:0f:54:96:09:3d:87:c5:
38:10:96:bf:dd:bc:b3:1b:6b:35:d8:41:11:20:5c:
e1:f6:eb:fd:33:84:09:a7:0f:97:03:78:e3:dc:94:
d8:71:2d:d2:95:77:29:86:42:46:d6:64:ea:45:8b:
d1:10:1b:58:52:00:b4:44:69:36:72:b4:49:c5:f9:
ec:aa:61:ed:49:1e:27:0a:33:f7:4f:3d:1b:4a:07:
f6:07:0a:ec:4d:43:6d:cf:ec:0d:c4:11:de:8a:db:
5f:34:a5:66:ae:30:47:3a:82:f9:68:32:b1:b0:b0:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:30:07:F4:11:E0:FC:BE:81:86:AB:5F:F0:52:7A:CD:6E:85:EE
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:1f:ba:32:6c:ae:10:6b:9c:92:1b:d5:57:b2:69:80:f5:
3d:e7:bb:4c:a3:0b:7c:81:6f:c3:a8:06:d4:1e:6f:da:ec:5d:
0f:10:d8:88:d4:3d:69:2a:f7:7e:77:31:b8:72:36:1c:8d:f8:
0c:8b:84:95:0a:e0:30:21:07:b3:1d:ec:99:27:99:10:a1:99:
57:c4:71:6c:fd:e6:73:6e:cf:f4:d5:9f:44:1f:40:94:0c:3a:
dc:22:cf:92:04:62:17:a8:81:a8:24:9e:91:c7:a6:b7:d2:5b:
41:60:ae:1c:c6:fe:72:26:68:6b:a7:74:02:89:4f:05:22:89:
74:1c:31:86:2f:1b:4f:57:42:06:b2:3d:cb:84:ab:91:b7:99:
78:17:36:d0:bd:e9:15:a3:3a:04:ad:8c:7e:a5:5a:30:21:cc:
ae:a4:10:78:d8:83:08:a4:8f:d4:56:2d:0e:0d:8d:c2:68:aa:
71:a1:9a:4e:37:ba:3f:20:fa:1f:98:25:f5:37:cc:07:07:7f:
27:c1:17:2d:21:de:b1:c7:57:bf:6e:b8:18:7a:23:1c:2a:80:
be:a4:43:4a:1e:f6:bd:d8:79:c7:04:b7:62:25:70:f8:43:27:
7b:52:f6:8d:21:17:b3:78:01:60:f7:9e:5f:f7:a5:35:4a:0b:
bc:32:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:44 2025 by rpki-client