Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: 5rA3i9pTGtvKh+4LayhGKsLNVSGJI38Fo3KRwnuMefs=
Subject key identifier: 8F:AF:E5:AF:47:DE:CC:02:AD:9D:94:D3:84:06:C3:3A:14:65:A2:43
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 01976D069004C6697F577263182BA02D0FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0CC5
Signing time: Sat 14 Jun 2025 06:00:35 +0000
Manifest this update: Sat 14 Jun 2025 06:00:35 +0000
Manifest next update: Sun 15 Jun 2025 06:00:35 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: XQnXsM4RLeDNcZerQZkXeXTzIMS9fhXXQPrJY0HX6NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:90:04:c6:69:7f:57:72:63:18:2b:a0:2d:0f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Jun 14 06:00:35 2025 GMT
Not After : Jun 15 06:00:35 2025 GMT
Subject: CN=8fafe5af47decc02ad9d94d38406c33a1465a243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:04:d5:27:55:01:b6:8b:d7:4f:30:ec:f4:
b6:29:31:aa:9f:a1:d6:09:cc:13:d1:cc:e5:88:e9:
f2:40:6b:ee:5f:60:a5:1f:c5:a5:64:76:b0:1f:db:
6d:6a:de:1f:d8:d6:86:48:59:71:1d:54:41:3d:e5:
f9:f0:04:76:25:f1:9e:a8:32:c5:e7:5d:a2:b2:31:
27:6f:33:6d:d4:c5:89:9a:fb:e6:51:0b:4e:d1:94:
b6:19:b4:4e:01:f1:89:6a:3d:f9:52:ed:72:70:46:
d1:a7:73:0e:97:f3:04:18:49:3c:96:fc:7f:7c:4b:
32:09:14:db:a8:d0:ad:75:91:62:48:c7:44:8b:b8:
12:cc:4d:fc:c7:82:88:6e:fb:6f:ca:e5:e8:7b:54:
f7:da:d1:45:d3:91:28:b9:8a:fb:5b:2d:49:a1:d8:
22:7b:0b:b3:f9:3c:32:8b:db:12:d1:ea:80:68:8b:
1e:c2:d1:1c:3e:0f:f5:a4:43:45:89:fd:52:3b:d1:
2d:37:43:04:a4:48:5b:aa:6b:01:7f:20:92:f1:91:
66:0e:42:52:08:0b:ec:88:2f:ee:91:f6:30:d3:8e:
73:44:e3:bb:48:e6:09:35:a9:7e:d9:2a:56:84:ea:
ac:dd:69:b4:ef:af:24:af:16:f1:28:72:e7:50:48:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:E5:AF:47:DE:CC:02:AD:9D:94:D3:84:06:C3:3A:14:65:A2:43
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4a:af:bc:a3:63:a2:27:6d:0f:46:a1:c3:4d:e6:11:ed:0c:
7c:b9:84:bc:cb:80:ac:52:ec:4a:15:82:a2:2b:2c:a8:e1:13:
50:bd:85:f4:66:b6:e6:58:52:d6:54:42:59:46:b2:39:16:39:
d7:eb:d1:60:23:1a:29:8a:63:fc:1d:81:c3:93:f9:56:33:57:
b0:20:d2:c0:22:e5:89:3d:c3:f6:27:51:6a:2f:ce:b2:71:c1:
29:c8:f5:95:d0:15:fb:80:f5:e2:7f:f5:36:57:d0:70:81:6e:
4e:9c:7b:2a:3d:2c:17:79:36:5f:7c:64:97:5c:d6:f9:b1:7f:
17:78:5c:b7:0c:44:35:86:64:cd:c3:7e:5b:dc:3d:72:c5:7b:
5f:ae:cd:61:02:34:b8:83:18:8b:c1:16:19:2d:2b:96:81:6c:
36:f2:51:e9:fb:2d:f9:81:38:51:06:0b:9e:bb:a3:d2:59:bb:
84:01:7d:c5:54:22:e7:27:ac:55:7c:ff:41:e8:81:50:f6:a4:
9e:9a:5b:42:71:4b:7e:4b:5c:57:9b:61:f2:73:9f:11:45:b8:
86:c4:77:be:17:df:85:a2:0f:aa:75:88:ee:75:75:c7:fa:e9:
79:4b:0c:c5:12:ce:ea:41:f7:12:e0:30:8c:08:ca:4a:da:ae:
f0:cc:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:25 2025 by rpki-client