Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 1o7iubTJC3484L+UlFH2EkSeUNBxO3OzzUqQUQT0Y94=
Subject key identifier: C6:DD:EE:6A:D4:2F:9F:07:B1:54:2A:04:8B:54:20:AC:25:3F:E6:C5
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019770AC3C1E935584086BDB31F77067DBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0BE0
Signing time: Sat 14 Jun 2025 23:00:25 +0000
Manifest this update: Sat 14 Jun 2025 23:00:25 +0000
Manifest next update: Sun 15 Jun 2025 23:00:25 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 4Dk5XIY6RFhPUZZk+94MAEvD2l5ks1rIERycU4oDTQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:3c:1e:93:55:84:08:6b:db:31:f7:70:67:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 14 23:00:25 2025 GMT
Not After : Jun 15 23:00:25 2025 GMT
Subject: CN=c6ddee6ad42f9f07b1542a048b5420ac253fe6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:f0:1e:de:b8:22:f3:3d:a9:6e:43:ba:a7:
ab:fb:56:73:99:e1:e7:4e:02:d2:32:bc:39:e0:25:
bd:6d:1a:32:dd:57:0b:25:ba:44:a2:ef:b7:75:04:
03:e0:24:2d:48:32:a9:11:27:ed:8c:07:d7:69:da:
4a:de:ce:cc:ac:7e:5c:f1:c9:72:b3:2a:b1:e3:26:
41:fe:d2:24:e5:1f:9c:ba:96:ef:77:7e:87:3d:f2:
8b:c0:30:2d:d2:18:8b:a8:91:40:07:dc:92:19:4a:
92:b9:20:7a:28:9d:e5:1b:e1:0e:13:3c:98:37:a3:
f2:58:50:0f:4c:dc:04:94:10:65:18:59:26:11:b0:
35:fb:77:2c:67:bc:47:40:e7:2c:a8:29:c0:78:2e:
45:e1:28:87:b7:81:9d:70:98:75:c1:cc:af:56:10:
3d:9c:b6:4e:70:da:b1:bf:82:92:79:70:f6:6d:ff:
2f:b7:04:04:7c:c7:ef:fe:9c:39:ab:f9:5b:4d:e7:
77:a4:3d:83:47:35:44:2b:57:4b:28:21:84:56:b9:
53:c3:6f:d1:30:17:38:9d:76:20:ef:5e:d0:7b:5f:
d9:86:00:06:db:88:4e:07:35:19:4d:00:92:22:29:
38:9b:4b:4f:52:38:df:dc:6a:ad:5e:27:41:b7:af:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:EE:6A:D4:2F:9F:07:B1:54:2A:04:8B:54:20:AC:25:3F:E6:C5
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:52:46:e1:9d:7f:89:83:79:bb:4c:2b:f6:f3:ae:90:a1:d2:
23:0f:b4:de:ff:7d:cc:cd:97:25:15:5d:50:00:bb:53:22:fa:
77:51:fd:fa:71:3d:27:c6:d6:eb:c2:b1:4a:4c:88:a6:42:67:
45:66:d0:df:24:73:78:b5:64:3d:46:70:3c:dd:0b:c0:7f:f4:
51:7c:37:5f:9f:ac:7d:99:a0:68:e8:14:da:06:e3:c9:5e:76:
a5:d3:51:04:fa:78:dc:09:99:ac:d3:86:20:8a:4f:bc:a0:04:
b5:90:9e:9b:a4:3f:c4:8f:17:d7:f3:9a:1b:06:f6:84:a3:ed:
aa:64:b3:41:c8:5b:cd:2c:7e:d5:6c:da:1d:95:c7:f9:30:c9:
62:4e:df:78:5f:94:77:f5:a3:20:d7:66:7f:25:91:ee:15:0d:
3b:05:97:56:30:f6:2b:6b:97:ff:cb:65:d2:51:ed:af:e9:7b:
30:8a:f1:5f:b5:5c:0f:f8:03:39:71:06:6e:6b:76:6e:93:64:
4a:59:41:fa:de:39:0b:9f:77:19:ef:53:75:b3:06:e2:72:2d:
4f:c0:d8:7b:9b:80:d8:cd:17:bb:f8:c2:35:94:fd:07:67:04:
9d:c0:dc:8b:a8:43:bd:f9:70:4b:57:21:01:44:12:85:e3:75:
a0:30:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:48 2025 by rpki-client