Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: NNbCXfFssROF7c2D6Gkypa/tvQ8xJZFzkRk6MPmE6GY=
Subject key identifier: EC:BC:C9:1F:8F:11:49:06:6D:E5:0E:78:41:52:43:85:E0:C2:4A:26
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01976EBDC552F2BF5A76A6F8C54846A308D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 14:00:19 +0000
Manifest this update: Sat 14 Jun 2025 14:00:19 +0000
Manifest next update: Sun 15 Jun 2025 14:00:19 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: gCloGaWtq+To5VE/8akTBxMeOT5MQ7TsrqiVyR+ZJ0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:c5:52:f2:bf:5a:76:a6:f8:c5:48:46:a3:08:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jun 14 14:00:19 2025 GMT
Not After : Jun 15 14:00:19 2025 GMT
Subject: CN=ecbcc91f8f1149066de50e7841524385e0c24a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:c7:05:30:f8:df:8e:fd:1e:b5:1a:07:d4:
5b:89:92:11:c3:65:5e:50:3c:cf:e0:d5:c4:c9:37:
54:4d:1c:a9:f9:12:07:21:5c:c1:27:5b:ae:08:fe:
bd:ab:5b:b8:9a:53:04:d9:0d:a6:a2:ef:7c:75:33:
d8:91:fe:a5:04:3c:43:6e:a2:19:3d:cf:2e:ec:ff:
0b:01:51:cd:9e:c6:97:dc:cc:27:95:3a:d3:3b:e7:
b7:74:4a:39:72:17:07:fd:2e:5f:e5:78:64:12:dc:
6c:78:de:6b:bd:4b:d6:9a:0b:fc:b4:bd:f4:87:91:
f8:c4:e3:03:ab:4e:80:12:78:e7:af:4c:a5:03:f2:
33:97:f2:8a:88:96:b7:76:c5:f9:c0:33:2c:14:43:
77:0c:b1:33:50:2d:66:cd:f7:a3:38:aa:fb:d8:1e:
80:d7:2c:10:12:42:f5:0d:94:a8:c7:98:c9:ea:35:
02:b4:3d:2c:b3:97:02:72:63:13:59:25:26:eb:90:
15:b1:26:5e:a6:58:47:03:74:0a:5d:25:f0:93:c1:
1e:38:2f:25:19:62:c5:9f:e9:93:e4:26:04:ed:d3:
f8:5f:53:9b:ba:87:0e:82:a0:e6:ec:4b:18:99:d3:
ec:2e:d5:7b:68:d0:f3:5b:de:72:f0:50:bd:45:9d:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:C9:1F:8F:11:49:06:6D:E5:0E:78:41:52:43:85:E0:C2:4A:26
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:a3:b3:3c:0f:cc:fb:ed:90:77:1f:4c:f5:94:86:17:8a:
10:74:60:af:49:59:4b:53:29:68:d4:d4:c0:d1:3a:c0:1d:62:
b6:59:c3:cf:f6:02:e9:03:a4:0f:1f:4d:d6:8f:ef:54:48:8a:
4f:06:70:f2:56:9b:33:b0:a8:26:1b:57:ff:49:2e:9f:79:48:
e6:7a:97:40:ea:09:1d:e2:c5:ee:00:93:74:b4:e5:f5:93:71:
e8:79:d5:fe:a3:8f:0d:cc:b0:c0:a9:e0:c7:0b:a0:03:07:d2:
88:f2:b9:6f:a3:6a:fe:d1:bb:ab:c1:84:15:e0:b5:80:f4:98:
12:25:a3:20:1c:f7:1c:09:9b:0a:6d:64:86:f5:2f:0d:21:73:
5b:72:bc:d0:f0:2a:6c:18:c9:a9:d4:ca:d1:6e:be:03:1d:09:
23:3b:ae:92:7d:8e:42:42:dd:66:a8:4a:2e:55:6a:dc:96:fb:
8e:c0:0e:43:e4:e3:5e:4b:a0:66:72:bc:6c:fc:92:96:5e:84:
06:2c:4c:1c:36:ec:56:57:1a:e1:21:7a:2d:66:7d:74:d2:e8:
84:ec:d8:43:fb:66:19:b2:8c:e2:c3:3c:6b:5f:cc:8a:7c:59:
39:ad:36:69:26:5e:de:14:e5:78:6b:22:c2:0b:87:72:8c:30:
0c:24:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:42:08 2025 by rpki-client