Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: afwwMc7saAFTYZwpSYTE6yGVDjmVsnGgvSgXRbtXQQI=
Subject key identifier: F8:20:C7:6C:89:C1:CF:0C:CF:C8:03:CD:81:C8:F3:1D:F1:0F:71:C2
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 01976EBE1671CDFCD3DFB7BCC2262E5C5245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0C0D
Signing time: Sat 14 Jun 2025 14:00:40 +0000
Manifest this update: Sat 14 Jun 2025 14:00:40 +0000
Manifest next update: Sun 15 Jun 2025 14:00:40 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: W3sVrdYBN7mJ1nwxLmGYjk1WT9G05HVY3pqDRJeUqdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:16:71:cd:fc:d3:df:b7:bc:c2:26:2e:5c:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jun 14 14:00:40 2025 GMT
Not After : Jun 15 14:00:40 2025 GMT
Subject: CN=f820c76c89c1cf0ccfc803cd81c8f31df10f71c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:a2:8b:34:d1:21:27:5d:f4:03:e7:cf:bb:
32:c2:25:c7:ba:a0:30:df:0a:fa:e3:9a:e6:00:38:
a0:3b:08:56:24:de:5a:d3:b9:87:ae:55:aa:64:e9:
1c:55:04:c5:b3:70:c7:45:bd:9c:65:1c:41:04:50:
47:b7:90:56:fd:af:88:2b:86:01:ec:dd:1c:2c:34:
18:bf:94:7a:2b:05:96:1f:31:57:a5:4b:5d:a0:70:
f5:31:56:6d:14:93:60:3a:20:98:35:17:fc:c0:1b:
1a:e6:43:b6:bc:68:5d:ad:19:39:96:c6:e7:d2:86:
a9:fd:32:97:bb:ad:60:50:5f:12:80:78:f8:6c:f0:
db:94:c5:1a:4e:2c:9f:ff:7f:64:ed:f1:fc:fe:67:
04:0c:62:63:28:9b:ad:e0:12:c5:15:e4:30:7e:68:
58:82:ee:20:e1:19:95:0d:24:1c:18:cc:a6:8d:e3:
a7:4d:3b:83:75:f0:a6:43:7d:81:b2:90:e1:76:e4:
cd:d9:6c:24:02:f5:0a:07:51:d8:eb:29:6e:92:a6:
80:e0:b0:65:d9:14:18:4c:9d:56:6d:00:43:8c:ec:
43:55:55:d8:d9:08:01:5f:a3:0f:35:88:a3:8c:27:
fc:3a:d9:d3:49:9e:c9:e8:18:9c:af:db:f6:27:eb:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:C7:6C:89:C1:CF:0C:CF:C8:03:CD:81:C8:F3:1D:F1:0F:71:C2
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:1c:0d:ca:ec:4c:d1:0b:06:b0:16:ae:76:7d:05:d2:1b:
cc:57:c4:02:4e:cb:9a:fd:d1:b0:25:92:52:ee:b6:e3:b2:05:
6b:85:a9:4d:1b:5b:0f:07:9e:65:b6:73:36:d9:86:64:e3:85:
ad:de:08:d7:eb:10:39:84:91:a1:a7:02:6d:31:7a:bc:a9:1a:
b2:e3:82:ea:8e:83:f2:da:74:90:46:d6:db:93:42:d3:99:c8:
ac:36:b6:f3:56:98:f5:23:30:ce:50:b8:ad:6e:bb:e4:90:6d:
23:4d:16:26:d3:7a:e5:27:d6:3f:f9:a7:00:5a:26:0c:b1:b5:
39:cc:62:0a:86:89:70:4b:96:2e:a8:db:25:c5:51:35:74:ec:
64:39:af:c8:47:d2:10:d3:df:74:b8:8f:ca:64:3b:55:74:97:
49:f2:f0:6c:70:10:d5:fe:86:0c:89:a3:83:e5:1a:68:1b:d4:
a5:13:af:da:48:60:ec:70:cc:b3:27:c6:26:3d:86:93:7c:a8:
72:cf:f5:a4:30:bf:1c:79:f3:c5:ad:0f:40:ca:3d:6f:e6:60:
b3:11:1d:70:69:0a:05:c1:89:d1:bb:02:0d:74:e7:76:5b:bb:
49:1a:55:d5:05:e5:a4:bb:fe:0c:16:80:90:fc:f5:4c:25:ad:
47:b4:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:45 2025 by rpki-client