Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: +S9FOonfmH18x3y2PJeHyJQ2t3i5eAJviH0dzfzjYPI=
Subject key identifier: AB:BE:08:5F:69:4A:3E:22:12:F3:2B:20:66:6A:10:EB:1C:48:7F:2F
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01976EBE20FC74F1DB6A904F39E9276C5298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 14:00:43 +0000
Manifest this update: Sat 14 Jun 2025 14:00:43 +0000
Manifest next update: Sun 15 Jun 2025 14:00:43 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: 3GRPxJpQnBhAgKy3QKEDvn0YGxXkgam/2QPyltDKSHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:20:fc:74:f1:db:6a:90:4f:39:e9:27:6c:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jun 14 14:00:43 2025 GMT
Not After : Jun 15 14:00:43 2025 GMT
Subject: CN=abbe085f694a3e2212f32b20666a10eb1c487f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:1d:67:31:99:e8:4f:81:f0:7f:a4:63:43:
94:ea:20:dc:fd:0f:ce:1c:37:64:44:6b:00:e8:46:
07:fa:55:22:0d:fc:6a:19:89:d9:95:89:8a:ae:59:
fd:7d:05:02:6c:42:2e:79:b8:41:c0:be:70:dd:aa:
66:c1:31:45:ce:32:68:c6:4a:51:20:06:33:4e:7a:
ff:32:2a:96:72:3d:d7:18:b2:e0:64:9b:46:0a:04:
68:7d:68:a9:85:01:87:3b:74:68:03:22:13:2e:0a:
96:d4:ee:1a:47:42:17:d9:7e:2b:bc:d4:98:4c:39:
0a:08:20:10:64:c9:ff:11:2b:60:90:8e:49:75:75:
fe:78:45:48:8d:08:bf:4d:60:f3:87:49:e9:04:3c:
3a:37:9e:09:d7:0c:3a:09:f7:57:4e:0d:b9:dc:72:
2f:0b:27:1a:b9:9b:34:c5:51:e0:a4:c3:19:18:30:
a6:f0:f1:3c:e8:a0:d9:e2:80:62:98:0f:e1:0c:10:
a0:d6:dc:da:98:1d:11:b7:9f:35:53:11:18:81:39:
5c:ab:4d:f9:f3:84:43:92:22:63:40:c4:0d:b8:1d:
90:a5:4d:c9:af:5d:4e:69:6c:a1:49:d2:38:33:cf:
6c:fb:a8:ee:b7:c5:7c:70:6c:f8:95:07:04:8e:16:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:08:5F:69:4A:3E:22:12:F3:2B:20:66:6A:10:EB:1C:48:7F:2F
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:44:f8:8d:2e:1d:74:fb:91:c4:63:69:ca:88:69:f4:9f:a7:
91:28:9d:f0:42:37:cb:08:7e:dd:28:55:89:21:59:22:81:cd:
d1:15:d5:e1:ad:48:f1:1f:7a:7f:91:0f:16:97:b5:89:fe:65:
06:4d:54:74:5b:4a:8f:de:b4:07:1f:36:98:24:87:3f:ef:29:
92:9f:0f:ef:34:65:40:d0:2a:c9:57:85:df:6a:e2:4e:da:a1:
ff:d7:f5:71:d6:11:c8:a7:51:93:79:dc:3f:d5:37:4f:48:46:
cf:58:00:4f:3f:5f:e0:8d:25:8d:09:1e:2e:29:38:66:3b:33:
3b:ac:b2:46:79:a9:d3:c5:94:df:ea:94:3b:fe:03:8d:f8:25:
47:68:56:36:76:ef:81:cd:c0:39:94:1a:d3:7b:b1:88:62:96:
e5:38:2d:05:ca:a0:44:17:40:7b:b8:f7:90:6e:f3:18:db:55:
dd:cb:22:39:50:15:92:c8:b6:5b:4b:58:25:26:e9:7f:65:27:
50:d5:b2:26:09:27:b2:99:53:a9:e2:7a:6e:51:14:c1:cf:3b:
9a:e4:84:8b:8a:d3:ab:38:60:85:cd:9d:0c:07:8d:67:21:60:
7e:b2:52:5f:29:ed:e8:db:11:65:9f:97:d7:0d:2f:61:b5:0d:
84:1a:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:49:41 2025 by rpki-client