Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: vf0596hU9uPSG0MCYWFdHdCnBekaPhonM9tbJ90c/GU=
Subject key identifier: D2:34:61:7D:E6:56:EB:06:B6:29:DE:71:17:69:2B:52:08:E7:63:55
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 0197684E33FAF8FF6CEDFCB965C337CB9CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 08:00:44 +0000
Manifest this update: Fri 13 Jun 2025 08:00:44 +0000
Manifest next update: Sat 14 Jun 2025 08:00:44 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: FdRB74wPJRvnMz+D6L/p/1pC4VsPhslZqlfqO35UQwg=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:33:fa:f8:ff:6c:ed:fc:b9:65:c3:37:cb:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Jun 13 08:00:44 2025 GMT
Not After : Jun 14 08:00:44 2025 GMT
Subject: CN=d234617de656eb06b629de7117692b5208e76355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:82:ce:94:2d:f4:09:49:04:e2:e3:31:e7:
9d:b4:2a:d7:de:17:c3:ca:fc:13:a3:ee:a2:2c:c8:
fa:b7:98:89:75:27:32:17:5f:82:e3:aa:a4:56:19:
a6:48:5e:6a:1e:cc:df:f0:dd:cf:61:e4:33:7e:81:
4c:a9:09:e6:5a:d5:29:4a:5b:1b:83:79:e4:2b:bc:
94:39:9c:57:88:c2:e4:95:ec:d5:15:c6:09:c4:a8:
a8:86:cc:e5:b5:7b:60:ad:12:0e:28:23:3a:69:ab:
b4:30:8d:50:bd:29:89:c5:65:12:56:63:d1:9d:cc:
5b:d6:26:f8:eb:36:50:fc:13:2d:b3:a4:0a:bc:1c:
1c:ec:00:21:8f:0e:76:22:fe:31:f7:f6:08:53:cb:
79:38:63:24:e1:bf:25:81:1c:6f:fa:7c:55:9a:ad:
f4:09:10:7b:97:46:9b:94:6c:4f:34:94:e6:b3:10:
e1:ea:46:4e:9e:a2:eb:40:8e:1b:04:17:2f:ea:ed:
80:3c:1f:b0:61:70:a9:b7:cd:22:e4:d6:ca:c6:99:
ab:44:22:06:2c:f9:9a:70:9e:a3:a0:79:2e:5d:e4:
54:52:f3:d2:04:f2:e8:eb:de:84:4a:a5:32:45:b4:
87:d2:cb:dc:b1:ff:a7:80:8b:78:c6:aa:70:7c:ec:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:61:7D:E6:56:EB:06:B6:29:DE:71:17:69:2B:52:08:E7:63:55
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:fd:84:76:81:d1:b0:d7:c0:f5:a6:7e:a4:c4:11:c7:8c:
25:80:b3:b9:71:7f:ca:c9:3f:32:9d:4e:8e:0f:2f:ec:13:81:
6f:a4:c1:a3:f6:8f:26:0f:81:1f:73:fb:3a:85:6a:80:b9:9b:
60:1e:49:aa:a3:fa:e2:70:3c:95:14:3f:d0:e5:ea:43:ad:27:
d1:f0:73:60:15:da:f6:0d:4e:c0:d2:f3:4b:fb:89:f3:63:05:
f9:b7:a9:aa:d0:1c:b1:11:39:fd:6c:12:67:2a:9b:bc:5f:95:
4a:0c:87:6c:79:ab:c6:f5:ef:05:90:a1:04:f5:a6:72:b6:0c:
ca:a0:03:70:63:ea:7f:9e:b0:e7:61:63:f4:a2:4b:ad:3f:f1:
b5:a6:e2:8f:f5:07:19:58:48:56:4b:c6:74:f9:53:1d:ca:5f:
3b:1f:c5:0d:df:92:4f:57:45:f6:0c:b2:53:52:84:c4:ed:5f:
cb:a0:38:a2:72:f7:10:4a:ed:ff:88:8e:55:39:98:78:94:f0:
9a:f5:88:3c:b8:10:73:ce:c3:ca:e0:57:55:1f:36:62:6e:6a:
58:96:4b:28:5b:fd:c6:76:de:e3:76:5e:9b:14:16:6f:73:57:
0e:70:5b:bf:8b:58:14:d6:65:92:4a:13:24:18:aa:bc:b3:f3:
ec:29:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:25 2025 by rpki-client