Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: n5A/jez6hjnmn71A2giwtaAqHWUbyLN5+lBpua1UIfc=
Subject key identifier: 23:88:5F:5C:BC:7A:98:58:E4:F8:96:3E:40:F6:DD:40:90:18:8A:FA
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 01977640E0A42D246FBB5A9B8FFB327EB1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 084F
Signing time: Mon 16 Jun 2025 01:00:52 +0000
Manifest this update: Mon 16 Jun 2025 01:00:52 +0000
Manifest next update: Tue 17 Jun 2025 01:00:52 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: 8LeoPtmI+Oa0/QHsrcRhyIiTRitaHLBb4rlsM3izdWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:e0:a4:2d:24:6f:bb:5a:9b:8f:fb:32:7e:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Jun 16 01:00:52 2025 GMT
Not After : Jun 17 01:00:52 2025 GMT
Subject: CN=23885f5cbc7a9858e4f8963e40f6dd4090188afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:11:db:1b:8d:ed:4c:42:23:21:9d:8e:3f:
e2:ef:80:73:77:b6:09:cd:66:b3:bb:35:fd:42:aa:
94:24:a6:90:0d:c2:ec:c8:e8:ff:fb:7e:99:de:60:
ba:e7:cf:cf:6b:75:22:8b:9f:b5:5e:7c:6a:99:9c:
a3:93:c4:3a:f5:3f:35:e4:ad:5c:0a:f9:57:b9:cc:
ae:37:7c:f0:c7:dc:f8:74:1e:55:ec:89:ad:2c:77:
5a:c8:ed:91:fb:91:e1:bf:ff:bf:2a:3a:92:24:58:
ce:09:3a:cd:6e:6a:65:ff:c3:f2:ab:eb:af:96:87:
0e:0c:be:90:4e:1c:c8:8b:68:92:f1:1b:c1:70:55:
23:df:3e:df:81:25:4c:6b:6e:a5:9e:f1:2b:3f:31:
5b:0c:1f:dd:f7:25:d1:b2:8b:d0:87:92:64:22:8b:
2a:26:6d:2f:aa:37:1f:8e:06:03:c7:01:8a:4b:5d:
dd:36:88:fc:f9:aa:5a:6c:27:ba:64:93:be:b0:7d:
05:2c:29:9e:61:74:78:50:2e:b9:07:89:36:c7:16:
42:8a:af:2e:33:a1:1b:d3:07:5c:c7:36:f1:11:f0:
4e:87:c7:dd:95:f0:25:ff:1e:e0:8e:60:a6:d4:c8:
3d:7d:fa:15:00:f9:13:03:d7:c8:1b:7f:d1:93:25:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:5F:5C:BC:7A:98:58:E4:F8:96:3E:40:F6:DD:40:90:18:8A:FA
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:92:eb:ae:52:19:56:20:b7:9f:b4:5d:06:2c:69:f3:31:
0e:a5:de:13:c1:9b:3c:68:3a:0f:79:eb:b0:c1:3e:88:c1:98:
cd:99:0c:95:58:6f:2d:00:02:77:70:1c:b5:31:cd:de:74:6d:
a2:43:d4:bb:51:ea:0e:a2:c9:e8:94:2a:b2:80:29:bf:47:10:
f0:50:6a:6e:0a:42:46:8c:9e:cc:58:61:45:48:76:26:71:c1:
10:43:65:43:bc:54:1e:32:3e:4d:d0:90:e1:ed:e1:dd:3e:f2:
94:fc:1c:e5:3a:22:d6:0b:82:69:3c:b0:61:b3:9b:8e:48:a9:
3d:73:b5:08:7d:b6:a6:a6:1a:fe:69:fe:cb:1b:f0:80:c3:71:
db:49:9b:0a:cb:5b:5f:e8:93:1c:e2:18:46:10:4c:d8:25:fd:
0c:bd:97:93:a7:9d:53:c5:f2:87:55:15:7b:50:f8:6f:ed:37:
35:3e:d6:7e:86:d2:11:af:83:94:80:65:d0:73:dd:8e:9c:0e:
3f:8c:ad:02:e4:d9:c5:ac:62:49:17:c7:0d:91:ba:1f:3a:60:
9b:87:61:8d:e3:3c:a3:80:98:bc:7c:07:d4:a6:03:75:75:0b:
94:78:31:14:9f:c1:ac:e6:20:5a:fd:cf:4b:d8:c8:fa:9e:d2:
84:a7:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:37:06 2025 by rpki-client