Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: yQCCwqmeIG1SdVNo6y7mh1c4VQmluIJ3wuTxKySQG4c=
Subject key identifier: 76:8B:77:99:C3:E4:56:4A:55:DE:2A:43:7C:CD:20:9A:87:81:19:78
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01976DABF980AF8B3CDD9CB69874012629AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0DEF
Signing time: Sat 14 Jun 2025 09:01:16 +0000
Manifest this update: Sat 14 Jun 2025 09:01:16 +0000
Manifest next update: Sun 15 Jun 2025 09:01:16 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: QDUdyhJiHD5hmM8LeDq1Cx9c02H8/GSdhFMxoQ0xsX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:f9:80:af:8b:3c:dd:9c:b6:98:74:01:26:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jun 14 09:01:16 2025 GMT
Not After : Jun 15 09:01:16 2025 GMT
Subject: CN=768b7799c3e4564a55de2a437ccd209a87811978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:6b:37:c9:78:b5:21:1e:be:df:08:8f:ca:
d5:c4:de:e7:51:d4:fb:59:3f:0f:1f:7a:d5:fe:ec:
47:bc:8f:2a:ca:ed:cb:bf:39:14:5f:22:64:11:1e:
fe:26:3d:17:81:a8:ac:57:17:da:1f:08:cc:70:dd:
da:50:f6:ab:58:a0:40:29:c6:63:91:66:55:14:2f:
39:4c:d4:cc:07:8f:6a:58:e0:ab:6a:d5:18:32:f7:
f7:f3:19:0e:82:64:cc:72:94:9d:b2:81:eb:1f:75:
37:87:d0:b3:02:fe:ca:4e:38:01:9e:2a:0c:4f:0b:
a5:4f:33:16:a8:1c:28:3f:ed:11:b0:d9:15:9d:1e:
b5:5c:5e:a7:85:4e:1d:6f:8e:36:a9:5a:df:32:b7:
c2:24:c0:48:5a:b0:ee:c8:02:76:cb:f1:08:ec:aa:
82:b0:8e:08:e7:f2:a3:32:36:72:de:3e:06:79:87:
13:b6:db:9a:1d:c5:40:2f:bf:51:c8:65:16:3f:23:
20:4e:7f:2e:f8:c3:99:9e:8a:2b:64:31:0c:ae:a5:
e3:63:db:dd:88:ed:e1:79:bd:d7:6b:8b:3f:a6:4d:
cb:d2:09:43:db:d5:ef:ce:87:b4:bc:ab:d6:49:8d:
ec:ab:20:90:df:3e:88:10:60:af:55:62:dc:9d:1e:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:77:99:C3:E4:56:4A:55:DE:2A:43:7C:CD:20:9A:87:81:19:78
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:9c:a2:81:d3:66:55:45:88:54:65:b6:2c:38:c4:76:c5:
00:1a:98:77:2d:1b:69:e3:de:00:7c:e8:f4:d0:f2:9e:ae:f0:
40:63:1c:e2:28:bd:fa:71:41:72:f2:a1:1b:a7:fe:fd:23:f9:
95:4a:c5:c5:e7:63:41:4b:75:8f:e1:b6:5e:30:cb:da:e5:47:
60:e0:6b:6b:32:0a:a3:4e:2c:77:8d:48:03:47:ac:8f:12:7b:
59:75:b7:15:8b:d3:0b:0b:d1:75:74:fb:2f:f4:39:08:a6:8c:
0a:b0:c3:62:38:a0:83:30:57:1b:3e:76:a3:70:db:ae:ca:6d:
0c:95:d0:72:f9:cd:5a:26:7a:7f:1a:6c:e9:f6:c9:1f:40:fa:
34:eb:2c:90:30:36:37:c3:eb:52:08:3e:f8:68:aa:d7:d7:97:
bf:2c:aa:7c:7e:e9:97:f0:9e:8a:3f:8d:f3:1b:94:e3:28:8d:
02:47:f0:a1:e2:b6:5b:96:00:00:6b:54:cf:85:dd:1a:f7:75:
de:31:db:8c:39:3f:8c:b3:43:8f:de:d6:5a:2c:83:82:c2:1a:
f6:ae:fe:39:a3:12:9c:34:97:22:c2:a4:e0:b9:0c:b7:5b:72:
cf:e3:cf:fb:2a:96:6f:7a:48:92:ee:ce:e1:9e:14:83:87:a4:
6a:5f:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:41 2025 by rpki-client