Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: xK5umdq5YNvZqOeORWV/BJ+Trce/t/GWv20vdZ/6epA=
Subject key identifier: 44:63:18:AA:4E:50:66:44:48:0F:62:2E:0D:DE:4F:A1:EB:1E:6A:B5
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01976BF4667499C8CCC15E3AD3D2E551144E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1307
Signing time: Sat 14 Jun 2025 01:01:08 +0000
Manifest this update: Sat 14 Jun 2025 01:01:08 +0000
Manifest next update: Sun 15 Jun 2025 01:01:08 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: VfV2k8K9dHFSBLqssExZcHJ3Uk0+GEmFw5baxIxeLaQ=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:66:74:99:c8:cc:c1:5e:3a:d3:d2:e5:51:14:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jun 14 01:01:08 2025 GMT
Not After : Jun 15 01:01:08 2025 GMT
Subject: CN=446318aa4e506644480f622e0dde4fa1eb1e6ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:74:a1:79:60:e1:67:d0:9a:24:10:08:18:
fa:0f:fd:b8:17:93:ba:38:f4:0e:00:26:7e:06:09:
dc:84:42:b2:66:a4:b1:c5:15:15:a1:90:cd:d3:1d:
f1:08:00:69:0d:3a:1d:f3:87:b4:77:cd:98:54:d9:
63:54:70:fd:25:50:a2:1b:33:92:d6:d4:1f:20:04:
1a:26:d5:10:bd:c8:41:8f:fa:f1:6c:55:a2:4d:86:
0f:d8:a2:1c:63:cf:c3:02:86:b3:90:42:cb:83:19:
80:28:ed:3f:8a:54:c3:bb:20:fc:f1:04:55:f7:a8:
37:cb:1e:7c:6e:87:fa:55:4a:a1:78:f0:04:cf:e6:
1c:c4:ca:9e:25:29:d8:8f:c2:23:2d:28:3f:8a:32:
f8:1a:24:46:72:3d:df:73:e8:dc:42:1b:c8:29:92:
a6:0e:1f:03:7b:b8:02:f7:9a:ba:5b:e7:4f:66:92:
d5:ef:8e:d8:1e:21:b0:07:52:c3:0e:1c:c5:47:ba:
61:41:68:18:73:2c:7c:e0:c1:db:97:d3:ab:bf:09:
cc:90:1c:65:b2:43:29:96:75:b0:7e:6e:96:e8:c3:
06:21:57:2a:fa:08:e2:b5:00:a8:7c:b0:c5:39:05:
e5:ee:ce:ac:81:90:72:e5:27:89:40:0d:18:62:8e:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:18:AA:4E:50:66:44:48:0F:62:2E:0D:DE:4F:A1:EB:1E:6A:B5
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:f0:38:08:35:aa:00:fc:25:2a:66:f2:72:6d:df:f0:19:
43:9c:0b:c9:9c:c2:74:5b:e2:aa:13:ac:5f:8f:e2:ee:be:13:
60:69:f4:50:60:8d:0f:c4:ca:19:a1:2e:27:43:c5:05:89:c3:
c2:e8:80:19:62:73:f4:6d:07:32:3d:00:db:39:da:e4:18:b7:
a4:49:05:2e:f0:4d:26:27:d5:82:71:45:09:15:59:c3:66:d3:
1e:b3:fe:65:db:51:62:d1:f9:b5:fd:6a:df:25:78:38:c1:f4:
be:58:f7:6d:70:bb:04:6f:22:9d:a6:65:32:34:8a:37:14:05:
81:97:e0:32:b8:c1:f6:b8:d7:b2:01:f9:14:0b:eb:7e:95:0d:
82:03:40:8f:8b:bb:ce:1c:75:7a:8d:2f:a4:72:0b:93:a1:74:
f7:69:38:c4:0e:a8:bf:91:80:b0:73:7b:dd:5c:35:aa:cd:cd:
08:8d:58:a7:8d:26:ae:bc:d2:2d:0d:8a:e3:07:29:cc:d2:ea:
1a:9c:90:ea:63:a1:1c:1a:47:ca:5a:d2:fa:9c:e5:41:b5:a3:
b8:95:93:11:93:73:bf:57:ca:2d:14:b6:16:ad:73:85:32:04:
ca:97:fb:7f:42:23:57:39:fd:da:21:f9:e0:d3:86:5d:19:f0:
9b:2d:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:49 2025 by rpki-client