Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier: 4JUP1Umq9OOaMqwbPujgKfmN0IuarzFNds9egvcABok=
Subject key identifier: E9:22:A1:0B:02:EA:3F:CE:AC:3C:F4:05:EB:A5:82:2B:5D:B8:08:0A
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 01978320D566C173B4598E5AA3F647B5A2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number: 0756
Signing time: Wed 18 Jun 2025 13:00:56 +0000
Manifest this update: Wed 18 Jun 2025 13:00:56 +0000
Manifest next update: Thu 19 Jun 2025 13:00:56 +0000
Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: Y4dkY9Si4LeeQreFXyEGe7XhemjZbBuqNYi2SyCvceA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:d5:66:c1:73:b4:59:8e:5a:a3:f6:47:b5:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Jun 18 13:00:56 2025 GMT
Not After : Jun 19 13:00:56 2025 GMT
Subject: CN=e922a10b02ea3fceac3cf405eba5822b5db8080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:3d:a4:58:fb:24:65:91:35:fa:4b:da:8b:
6a:4c:63:52:7a:ac:4d:a0:44:26:6e:28:47:12:da:
a2:e5:1f:55:ce:12:4e:6f:42:2d:ff:7f:0e:15:b9:
d3:fd:1f:96:a3:e9:8c:8f:92:d7:64:ea:2f:7e:66:
55:d6:6a:91:de:d2:3d:4b:60:b7:50:2a:88:7e:1e:
fc:d9:cb:03:e3:be:d4:77:1f:7b:a3:46:4c:cd:f7:
10:c9:89:cb:77:9f:89:a3:91:1e:cd:da:b3:1a:6b:
b6:5e:01:c3:ee:41:80:4c:99:72:fd:33:86:f7:bf:
4e:90:ea:01:0f:23:50:84:c3:75:dd:5d:f5:38:bf:
03:62:5d:5a:a8:3e:ae:22:98:3e:b3:d5:2a:04:28:
01:e7:42:f9:cf:9f:7e:23:01:4d:0a:59:c3:60:2e:
df:e7:e0:87:1b:76:e9:b6:85:c0:23:51:f1:a9:59:
09:64:2b:af:b9:97:87:87:e6:10:95:e8:7e:f3:c8:
e2:47:a7:fa:e6:c5:95:8e:53:31:bd:4a:6a:c8:cf:
6b:7a:d0:00:4e:c9:fb:e5:bd:73:0d:6c:7f:14:8e:
e7:a0:56:ed:8e:98:f6:fe:e0:3e:00:e4:03:4a:39:
30:d7:ff:4b:73:29:44:bf:90:51:12:42:88:fd:93:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:A1:0B:02:EA:3F:CE:AC:3C:F4:05:EB:A5:82:2B:5D:B8:08:0A
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:e7:bb:3f:e4:29:cd:b1:1f:f5:bc:20:b6:7a:84:df:03:
29:55:e1:be:f3:e0:73:42:9b:e9:0f:9f:c3:2c:6e:29:ed:37:
48:08:7b:6e:8a:7e:db:be:da:14:86:bf:a1:af:00:55:c8:43:
13:98:ad:e5:ef:2f:43:ea:30:b2:28:4e:fe:4c:50:7b:51:e7:
02:0e:5e:0d:9d:77:5e:0c:51:96:04:8f:ca:13:8e:4e:a5:4e:
e2:f2:54:4f:08:eb:a9:bf:97:c5:3a:fb:3b:6d:9b:a8:af:a2:
a2:e5:3f:65:cd:14:e8:f9:02:5c:bc:01:7d:38:86:6b:d1:a1:
92:eb:a4:e0:e9:17:30:5c:d8:36:03:84:84:42:76:ed:d4:89:
af:b5:55:12:4b:b0:a2:9e:60:45:76:36:db:23:52:a5:28:3a:
43:cd:c0:af:8c:8d:f9:ac:89:7f:bd:86:aa:b4:ba:24:e8:39:
4a:c8:d6:d5:86:b0:fb:5d:fc:fc:ff:01:67:54:a1:8c:f1:31:
d5:88:b4:a4:37:9e:47:31:65:f8:70:49:45:ad:83:9b:42:83:
91:03:0f:d9:e0:05:8b:47:f8:74:fe:06:e4:df:76:89:fc:4c:
b1:31:d4:b2:32:7b:f4:5c:d0:f6:ef:75:f4:8e:2a:52:5c:34:
fa:dd:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:46:59 2025 by rpki-client