Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: jM/og9AD9nJa74SdfsrV6GbzHqhhSVbSX8UcNRYyONE=
Subject key identifier: 09:EE:DB:1A:B0:94:6B:99:79:20:28:DF:4E:2E:4A:AC:EA:7F:16:4F
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 01976E872DAB20D044A8F1AAA9484CFBDE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 32
Signing time: Sat 14 Jun 2025 13:00:42 +0000
Manifest this update: Sat 14 Jun 2025 13:00:42 +0000
Manifest next update: Sun 15 Jun 2025 13:00:42 +0000
Files and hashes: 1: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: 0EC2n9SRB8ZU8vxgbFL3tbCvAfqEhMLYCwdH4Keush4=)
2: hYC4G8-iHx18TcNgOVJpoymqlWE.roa (hash: krKVVMmbuUgfZ2ydkNUzq9SZ3lwhV/h03o//k4Y/uHM=)
3: jwS8BYVyHmc8BIbLl_GpRDxb_fw.roa (hash: 0vGJk8zdxED0U8VXXJSNZD+4l1MurWavnTSCf1SPtXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:2d:ab:20:d0:44:a8:f1:aa:a9:48:4c:fb:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Jun 14 13:00:42 2025 GMT
Not After : Jun 15 13:00:42 2025 GMT
Subject: CN=09eedb1ab0946b99792028df4e2e4aacea7f164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:70:26:0b:2a:b5:9f:ff:7f:12:d3:f4:d8:
30:be:68:ba:57:a3:af:27:9b:d3:66:57:0c:be:6b:
9d:20:32:d3:ed:79:34:41:38:7b:0d:b2:e7:b5:8f:
4f:0e:ba:2c:3f:37:b5:56:b1:21:2f:06:b8:d2:5b:
43:45:44:5d:d2:e6:9c:be:32:e7:3b:5e:cd:59:ca:
73:ea:69:89:77:a8:b4:68:57:51:b3:86:21:73:09:
fc:71:63:01:43:c0:c1:82:a4:4f:76:15:19:4c:50:
62:40:f5:00:9d:f5:f2:f7:af:dd:d7:1f:9c:1c:f6:
96:cb:8e:85:54:2d:77:bf:7b:b1:42:af:c0:75:24:
41:4a:40:0a:e4:6c:26:38:df:e6:88:4a:d4:87:34:
bd:1f:68:a4:cb:fc:19:99:d4:36:63:f8:8d:2c:d2:
92:6c:20:4e:7a:6f:cb:2e:11:8a:db:bb:1b:1b:48:
45:ef:35:13:86:32:4e:15:67:41:9d:0f:1a:63:49:
0c:09:e6:f7:bb:11:06:55:28:24:50:e2:a8:ac:98:
28:a6:a5:e6:2c:cc:4e:f9:2c:cb:91:58:dc:0b:54:
1c:65:30:32:31:c1:f8:5f:8a:b7:35:35:58:39:cb:
23:a9:5e:bd:05:fa:bd:91:f1:c8:47:c6:16:48:cc:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:DB:1A:B0:94:6B:99:79:20:28:DF:4E:2E:4A:AC:EA:7F:16:4F
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8b:79:7b:8f:2e:f8:0b:73:c8:c3:4d:20:ee:7d:07:db:4d:
fb:cd:17:28:e6:55:8d:6c:23:20:34:ce:c5:ae:07:ba:6e:ec:
21:85:77:98:39:7f:f2:da:bb:40:b0:cb:9d:21:69:74:ca:37:
cb:67:9a:5f:13:b0:82:f7:53:ca:6c:2a:03:3f:69:28:68:1f:
26:27:10:5d:47:cf:c1:1d:f2:32:72:2a:61:e4:23:2e:64:61:
d4:19:32:93:9c:01:cf:f3:2e:52:51:fe:27:2d:ae:6b:0a:97:
8f:13:0b:f8:57:77:ad:5a:98:49:a5:99:84:5d:c4:82:ec:66:
50:ef:52:68:a0:10:c7:8b:fa:bd:6c:c8:4c:5b:d3:16:8d:8f:
23:1d:b5:8b:e0:4d:ce:37:9b:d2:17:de:ff:f9:44:f9:4a:61:
a0:fc:cb:75:97:81:98:b5:ee:77:19:da:7b:86:a0:e9:f0:24:
20:e2:5f:c3:c6:a2:ee:81:da:cb:73:c6:d5:f1:be:f5:25:97:
f5:0e:88:2c:71:40:48:d9:d6:84:6c:43:24:37:0a:a1:14:32:
73:0b:f3:3f:68:55:51:04:07:2d:44:98:2b:4e:db:bc:ca:2a:
f6:56:c0:54:3d:d4:06:84:59:2e:49:0d:91:46:bf:95:b5:c5:
5e:21:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:38:56 2025 by rpki-client