Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: Z1Y+9YJ97cJOLfTw7p3UnVBIvBPmm8qbxjJgG6iV9Lk=
Subject key identifier: 89:A2:76:E9:A3:37:B4:28:31:EC:4E:22:7D:AB:0B:6B:99:E8:53:74
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019769612FEB1D4DC293D326D3A48E479EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 11A9
Signing time: Fri 13 Jun 2025 13:01:06 +0000
Manifest this update: Fri 13 Jun 2025 13:01:06 +0000
Manifest next update: Sat 14 Jun 2025 13:01:06 +0000
Files and hashes: 1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: nvkd4XvzzYpNQ8pECBxd0SvesuAXo8Qh1dNiMlu457M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2f:eb:1d:4d:c2:93:d3:26:d3:a4:8e:47:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jun 13 13:01:06 2025 GMT
Not After : Jun 14 13:01:06 2025 GMT
Subject: CN=89a276e9a337b42831ec4e227dab0b6b99e85374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:7a:da:61:4e:b0:dd:84:97:df:26:81:8d:
a7:50:0b:0d:7f:0c:53:ab:94:82:8e:f6:bd:92:40:
c4:8d:f3:05:09:b4:fd:de:d4:78:f7:4b:de:77:35:
98:36:ee:b8:b5:2a:18:a4:bf:a4:1d:e7:7e:73:d7:
9d:22:38:68:89:0d:13:3b:1d:6d:af:2e:0a:f6:cb:
2a:46:58:6b:2e:d6:3f:4c:9a:ac:5c:d8:df:c5:a4:
a8:f6:f9:da:b3:a6:af:cb:28:34:cc:ed:b9:e5:2c:
0e:61:e3:ac:e5:84:9f:03:d3:66:fe:f4:3a:cc:a4:
03:d8:98:ad:cc:eb:93:d8:09:aa:87:5a:4e:72:6b:
51:dc:13:76:74:c2:f3:f3:83:34:da:d0:2c:fa:14:
2a:99:04:ee:0b:fa:73:a6:9f:3f:29:b1:d7:0d:6b:
79:21:15:10:77:b4:cc:63:1a:a1:fc:2f:ef:81:d3:
ea:b3:37:f2:4d:05:16:61:83:c7:30:0a:7a:9d:82:
15:28:de:ee:4d:69:89:0f:25:e8:fb:22:6c:a8:30:
d4:28:14:93:c4:d6:69:91:e4:f3:6f:be:98:b2:b2:
4d:67:44:3c:2e:2c:1f:9c:6c:6c:71:71:77:c8:e3:
cf:b7:8c:b6:20:df:9a:26:54:f4:02:e2:b7:d1:a8:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:76:E9:A3:37:B4:28:31:EC:4E:22:7D:AB:0B:6B:99:E8:53:74
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:56:13:a0:c4:ea:7e:63:dc:34:a0:c0:47:da:31:55:d0:
72:3c:02:bc:24:a1:4a:38:63:8a:67:9b:d9:28:be:b4:41:5c:
fb:29:41:e1:86:22:f1:c8:90:9d:8d:f2:1e:ba:d0:1e:37:d8:
42:ca:8f:df:c1:a5:1e:91:16:a2:c5:24:26:7d:7e:63:4a:91:
ab:bf:13:90:13:9d:83:b3:0e:a3:66:a1:45:67:23:98:3c:3f:
f6:b3:46:da:ee:a0:bd:74:c5:93:d7:d2:fc:ef:92:82:ab:19:
57:8a:59:0d:46:52:b3:e4:df:ce:d0:0f:e1:6d:21:c9:63:12:
cd:75:3c:35:50:23:63:bc:23:bf:6c:8b:9b:28:a3:23:72:d5:
58:5c:78:1b:fd:f9:f8:d9:31:da:39:da:81:99:ab:40:88:0b:
2f:f1:fd:27:5f:0c:fc:ae:38:4b:17:81:1b:20:60:54:0e:5c:
a4:5b:c7:d4:37:31:2d:a7:73:89:6b:d7:53:f6:ab:29:89:8a:
a8:09:e3:26:24:b7:97:ef:47:79:f1:21:3c:17:38:54:66:15:
79:4f:82:87:e0:57:a4:6a:fc:22:3e:48:83:59:71:46:89:eb:
47:48:c3:ad:b7:58:c4:da:0c:f9:bd:18:33:73:cf:3d:77:8f:
2a:fd:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:06 2025 by rpki-client