Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: BunjqQUTzjUedYlN9oNLMivITs5JLN4wqPPFmGAdVfQ=
Subject key identifier: 1E:9C:92:38:E8:6C:B8:87:9C:91:F8:6E:42:5F:AC:47:76:A6:8B:82
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 019768F2FDE59095A29CCF0BF85BA62875F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0DE2
Signing time: Fri 13 Jun 2025 11:00:44 +0000
Manifest this update: Fri 13 Jun 2025 11:00:44 +0000
Manifest next update: Sat 14 Jun 2025 11:00:44 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: 59iWvRCxEcNSCgFUrm8J0CL8dstnx2fDY+dBlpRoUzI=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:fd:e5:90:95:a2:9c:cf:0b:f8:5b:a6:28:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Jun 13 11:00:44 2025 GMT
Not After : Jun 14 11:00:44 2025 GMT
Subject: CN=1e9c9238e86cb8879c91f86e425fac4776a68b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:23:63:cb:35:e6:cd:db:ad:09:6b:8d:95:
e2:c3:8a:49:56:ec:e4:48:d1:b4:cc:56:fc:0f:53:
58:34:c4:d6:d4:45:83:c3:50:b9:e2:75:c1:4c:16:
f2:7d:a0:f5:d3:c3:7b:1c:41:db:0a:be:0c:0f:cf:
ed:15:d8:7a:59:91:83:bf:6d:30:5a:bc:db:45:63:
fc:7a:04:03:f3:26:b2:8e:73:88:87:26:a4:ab:f6:
88:67:77:ce:83:32:fb:fb:27:dd:4e:19:b5:57:4d:
b4:12:a4:6b:27:b7:3f:1a:94:5a:f4:65:45:15:21:
60:56:70:53:2d:00:85:55:68:73:c1:68:e4:92:19:
9b:43:97:91:0d:2d:9e:6b:2f:14:85:4d:59:9a:6c:
1e:c0:a5:af:13:4c:82:5b:e9:19:2e:f2:29:ca:27:
4c:24:84:39:78:1d:ed:0c:6b:e6:8a:90:ab:64:fc:
57:15:d9:1e:ef:5e:92:97:f9:de:f4:27:a6:7d:37:
98:b2:22:26:f2:58:8d:29:32:33:a5:12:14:7f:6c:
7f:4e:80:61:de:99:91:f1:60:4d:c2:a6:69:4c:be:
8a:a0:d3:69:03:60:e5:b4:86:28:4b:aa:d5:77:97:
e8:7d:b5:ab:75:d3:1a:2c:cb:9e:ba:5c:67:97:99:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:92:38:E8:6C:B8:87:9C:91:F8:6E:42:5F:AC:47:76:A6:8B:82
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3a:86:e2:6c:ec:ac:70:5d:b6:1d:13:6f:7c:21:2e:36:6e:
bd:53:9a:b8:14:6c:c4:ab:d0:06:65:5f:91:b3:95:e1:fa:ad:
e9:1e:95:8f:4a:9e:3a:70:ba:5e:34:7c:cc:26:50:f8:01:ca:
6e:6e:66:20:e2:f5:a3:c4:5c:9e:94:af:f2:ec:bf:9f:2c:a0:
44:de:64:9e:0e:98:02:3c:ec:8a:a4:22:1b:a8:e5:6c:ef:66:
50:1d:bd:5b:a7:9f:b1:72:c7:f9:21:b5:a0:09:f8:84:b6:d9:
4d:71:48:14:87:68:f6:00:f3:6f:57:e0:3d:60:a2:40:56:24:
fb:68:c4:d0:62:f8:2f:a9:fb:4c:11:bc:57:77:d8:aa:5d:01:
61:3c:66:4c:e7:03:2b:56:e4:6b:21:54:57:fa:f4:c7:07:d7:
80:49:35:4a:41:ae:c0:0a:7d:ad:5e:e3:d4:7e:55:96:4a:ea:
8d:7d:42:36:ef:94:50:70:f5:3d:ee:bd:c6:73:28:6d:38:15:
08:68:91:45:84:fb:2f:74:c4:f5:30:c3:84:ea:67:07:c8:76:
49:bd:e0:86:6c:17:f2:50:b3:a9:68:6e:a3:58:f3:3c:ff:f1:
a2:48:24:14:db:78:2f:ca:08:d1:b1:20:f3:a4:b1:4a:d3:f4:
8a:ff:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:16 2025 by rpki-client