Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: H3Is5wX5ISx5sXP5ITR4iKbmP+nB/f06bhGhF2TB3fE=
Subject key identifier: BB:CC:AA:3E:FC:5B:31:FD:15:5F:DE:DC:A3:80:28:09:3B:0E:43:B8
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 01976EBE2FBC95302C6B4E7848D88A974B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0C77
Signing time: Sat 14 Jun 2025 14:00:47 +0000
Manifest this update: Sat 14 Jun 2025 14:00:47 +0000
Manifest next update: Sun 15 Jun 2025 14:00:47 +0000
Files and hashes: 1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: kzapznkeSlMWyzDc2qst2auCrmcoa+0qe5xX9AtcNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:2f:bc:95:30:2c:6b:4e:78:48:d8:8a:97:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Jun 14 14:00:47 2025 GMT
Not After : Jun 15 14:00:47 2025 GMT
Subject: CN=bbccaa3efc5b31fd155fdedca38028093b0e43b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:8b:82:ba:c3:6b:1e:f5:41:f0:0b:af:e4:
8f:4a:d9:13:14:e5:32:b2:74:8b:f8:f8:20:3b:0c:
2a:9c:9c:40:56:d0:5f:23:10:67:e4:72:37:73:50:
99:9c:15:3b:90:a5:4a:a8:7c:a3:ca:0b:77:a7:f7:
95:e4:69:58:c5:71:2a:d6:b4:ca:98:31:85:d2:63:
59:02:92:69:49:10:88:c6:15:a3:35:e8:c9:df:2b:
12:ac:58:2f:be:08:46:0b:f5:07:bf:a8:7a:4a:c2:
23:83:30:88:70:b9:0f:ee:b9:bd:89:5a:dd:ef:4a:
71:54:40:52:fe:56:47:15:27:6b:82:2f:39:ac:89:
9a:f0:1c:00:0c:38:55:52:9c:c5:c5:d3:3d:bb:36:
02:1f:f3:ef:5b:53:dd:c0:b4:e4:71:27:1c:80:da:
21:a7:6c:dd:44:40:17:6f:0a:6a:b5:3b:c7:19:d2:
c9:2f:93:11:b7:a2:4a:e0:a4:2b:cf:03:56:48:29:
00:4f:42:ad:2a:65:ce:b0:00:6d:6f:9e:44:38:42:
04:fc:77:5a:91:13:d8:03:e9:be:73:73:eb:7a:e1:
ba:bb:f1:6b:4d:84:6f:98:2b:4c:ae:bd:17:8a:8e:
80:aa:4e:59:e4:13:26:63:de:66:15:55:c5:a2:d0:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:AA:3E:FC:5B:31:FD:15:5F:DE:DC:A3:80:28:09:3B:0E:43:B8
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:73:d2:6e:1b:d0:f8:d5:c1:c4:15:ee:c0:4d:52:9c:77:f0:
a3:ad:7d:ca:d6:53:15:b9:d2:2c:d9:42:14:ab:53:7c:3d:98:
56:b3:71:f1:34:5b:f5:1d:3e:7d:2e:38:ea:9d:f6:24:ab:01:
36:71:c7:9c:8b:44:3c:88:14:8c:cd:d9:37:1e:d9:72:db:3e:
49:82:98:0c:73:e8:e7:8c:ce:a3:23:a2:d9:6a:eb:05:19:5f:
fa:80:11:64:17:c3:6b:08:a1:50:ac:f7:4c:9e:4c:b2:62:20:
f0:d0:3c:25:85:b6:e3:9a:19:74:48:b9:17:2d:5b:f7:5e:82:
b4:cd:9f:1f:2f:7e:55:c1:0e:50:73:4d:e1:6c:29:40:6f:45:
68:3b:c1:d7:49:2f:a9:69:4f:e9:d5:98:5d:d7:48:df:5b:09:
9b:63:1e:a7:6d:31:65:ec:ce:88:39:3e:17:6c:fe:26:23:53:
cd:b6:86:87:40:0e:ff:62:72:2c:d2:6e:2c:05:de:a0:48:66:
f4:7e:7a:43:46:f6:35:d5:04:32:c9:55:86:6b:6f:5c:cb:e7:
44:79:6e:25:7c:28:a7:eb:03:ad:e4:ef:e9:ae:8d:24:4b:9d:
03:51:05:af:e3:35:06:0f:f8:3e:e9:fe:4f:b7:d5:d0:17:0b:
0c:ad:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:22 2025 by rpki-client