Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: 98rAZnrDcAhukB9IKoIjdMbQBjJwEY2tRxx6yC4EKhg=
Subject key identifier: 2C:B4:37:91:34:80:1E:09:EC:61:53:3C:41:E2:B6:E8:E6:59:AE:7C
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01976BBDBABFEA1E158E2769A0ED0C23FB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0D1D
Signing time: Sat 14 Jun 2025 00:01:25 +0000
Manifest this update: Sat 14 Jun 2025 00:01:25 +0000
Manifest next update: Sun 15 Jun 2025 00:01:25 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: xVy7wMcsJa7+bsRV9JloxTIiCjyeWsUVJx35BEdJn/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:ba:bf:ea:1e:15:8e:27:69:a0:ed:0c:23:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jun 14 00:01:25 2025 GMT
Not After : Jun 15 00:01:25 2025 GMT
Subject: CN=2cb4379134801e09ec61533c41e2b6e8e659ae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:8c:80:9c:ad:a7:e4:8d:07:7c:e2:63:75:
e4:f7:57:3d:7c:1e:11:23:31:74:92:88:b8:1a:8c:
fc:36:65:75:0c:59:97:f5:2c:3e:15:0f:bd:5c:50:
c5:f1:20:b8:44:a0:e7:ef:c9:14:c3:c7:a6:9a:6f:
ed:2c:c0:1a:e5:ea:e6:ba:f8:01:4c:dd:fc:a8:64:
35:6f:9e:3a:18:f9:95:07:f8:8e:8b:d2:84:d1:cb:
ab:24:79:6e:41:b2:21:17:3d:1b:29:53:86:65:dc:
d5:df:2e:c1:73:a8:61:7b:9c:42:6a:08:a6:72:3c:
4d:6a:60:38:ed:23:e9:ec:e0:c7:4d:28:93:fe:5a:
06:b9:a2:67:13:35:d0:82:f9:56:68:63:4d:13:77:
9b:8b:f2:36:cb:5e:c6:67:ff:ab:fe:3c:38:d0:2c:
ff:61:40:7c:26:5e:41:ea:e7:fb:79:59:3d:d1:ef:
7d:fb:2f:26:d0:5f:b4:40:69:83:23:7e:e4:15:f0:
0a:6a:f9:44:57:01:97:ae:b2:dd:b6:4b:29:86:9d:
6a:84:cd:09:78:67:29:37:35:7e:1a:0e:34:6d:35:
df:87:5c:99:dc:1c:8f:0a:4e:4f:81:82:5b:ad:d3:
ba:2a:ba:3d:af:b4:00:fe:75:f6:cb:ea:83:19:62:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:37:91:34:80:1E:09:EC:61:53:3C:41:E2:B6:E8:E6:59:AE:7C
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:3f:74:b4:b1:23:73:a1:fa:63:ab:85:25:0b:a4:e2:7d:
d5:21:04:d0:9d:05:79:86:b3:ba:5d:ed:ae:c8:66:fe:6c:42:
7a:9f:55:bb:ff:4c:64:f3:6a:2c:d0:e5:39:7e:72:a4:70:26:
ab:78:bd:7e:82:b4:01:a7:33:5c:35:43:20:df:1c:5e:ea:b6:
94:d5:05:83:83:cd:1f:b1:f9:41:d8:1e:f2:e8:4f:21:f2:c0:
b1:65:a7:3e:9e:8e:44:7a:f2:9c:14:d2:df:85:42:dc:aa:8a:
c3:a9:8a:dc:25:c0:42:c3:b7:d3:78:a8:94:52:0f:76:58:3a:
a4:c0:b9:8d:0e:13:3b:d3:82:1b:4d:b5:af:fd:06:70:d6:47:
09:b9:73:f3:31:23:3b:a0:c7:2c:a6:90:7e:e3:e9:79:82:ce:
f3:8e:39:a4:be:56:cb:cf:8e:d2:ad:18:e9:00:6b:ea:ff:4e:
71:92:2f:0d:1f:32:2c:0a:f2:75:50:2f:bc:03:44:cd:26:49:
64:db:fd:61:06:07:46:38:f2:3f:82:11:8d:67:02:ba:c9:a8:
ad:2b:61:0e:c5:51:da:e4:6d:70:a7:32:a1:01:32:ef:2d:7c:
81:9c:00:ec:f9:3f:1b:b1:52:08:f2:79:f9:f7:31:cc:52:73:
33:87:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:46 2025 by rpki-client