Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: 6w7LCUHoER8gI9CKnhpEoO4bMU18EAIaG1cTFR0fVo8=
Subject key identifier: E7:30:BE:40:20:37:F8:80:CB:B0:17:BA:FE:25:0D:6A:DA:A1:8B:71
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 01976929FEFB58E66B17F8AB28D76D7E754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 1067
Signing time: Fri 13 Jun 2025 12:00:49 +0000
Manifest this update: Fri 13 Jun 2025 12:00:49 +0000
Manifest next update: Sat 14 Jun 2025 12:00:49 +0000
Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: Z7711EwmiEK9zMMwPFne9Awx8Hr4qd78ZK1CliHz6FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:fe:fb:58:e6:6b:17:f8:ab:28:d7:6d:7e:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Jun 13 12:00:49 2025 GMT
Not After : Jun 14 12:00:49 2025 GMT
Subject: CN=e730be402037f880cbb017bafe250d6adaa18b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:09:f0:5b:e8:a4:54:ba:c8:f4:63:c1:98:
6e:58:7a:ce:30:b1:86:39:5a:5b:5e:7a:6a:db:59:
7f:0b:b9:2e:e5:19:56:95:3f:2b:09:17:49:f7:89:
1c:f8:59:b0:96:49:45:1f:2f:3f:f7:ab:c5:94:ce:
49:7f:57:73:4d:40:ba:73:67:ac:8a:d8:72:86:80:
23:b8:52:67:b3:d9:26:54:0a:11:b6:b8:6c:7c:ed:
5b:31:d8:8b:fd:f4:3d:79:1b:3c:2a:62:74:c3:ce:
36:47:37:90:42:e8:37:4b:2c:0d:f7:fa:ef:4f:ee:
d2:09:5b:d8:20:03:61:38:60:6f:76:b4:87:f9:2c:
20:b6:77:79:f2:5b:b8:31:b3:0c:10:34:7f:a4:9c:
55:17:3d:83:04:a9:cc:69:2e:8d:fd:e8:a1:d2:d1:
74:b2:57:4c:b9:ce:41:f6:15:05:8b:6d:d9:7a:d3:
a5:79:6d:43:c4:78:07:ed:91:fc:1d:89:f4:8c:3f:
b7:d5:b6:b8:3b:5c:27:0b:c5:9a:39:4e:6e:9b:60:
a2:a2:2f:03:19:f8:a8:ed:63:e5:77:f4:75:a5:d3:
7f:0f:ec:a5:f6:bd:19:86:a0:09:00:1e:cc:ae:38:
54:0e:96:92:f2:6b:01:2d:6e:45:d6:1a:13:c3:70:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:BE:40:20:37:F8:80:CB:B0:17:BA:FE:25:0D:6A:DA:A1:8B:71
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7f:95:11:3b:b5:48:00:20:24:17:34:d3:db:98:bb:58:11:
9a:1e:70:ac:2b:d3:5d:5d:af:01:b3:8a:9b:67:82:dc:26:5c:
35:ac:09:63:b0:95:df:74:ff:9c:6f:2d:96:91:70:67:6d:11:
da:bf:cc:97:68:ab:7c:9a:69:ba:4f:71:c0:c2:fa:ba:7b:06:
82:d1:ec:17:60:54:aa:4e:e3:30:cd:da:79:7d:a2:41:8d:16:
71:6a:95:7e:77:94:5a:53:cf:79:2c:ba:3d:09:e8:e2:1b:e4:
47:03:68:d3:2d:f4:5e:a2:fd:66:1a:81:91:55:c1:a1:c5:5a:
7d:3a:2b:f1:4d:89:00:18:21:b1:b1:6d:be:86:43:d8:44:04:
e5:d4:eb:ca:62:66:3b:f8:59:c4:55:2f:fb:f0:15:62:83:6f:
3b:62:33:f4:70:09:76:63:82:60:b0:a0:17:04:ef:a0:81:91:
ea:4f:13:89:e9:f8:bc:b2:20:76:72:e0:ae:d7:7c:00:6d:73:
8c:90:c9:9c:b7:c9:32:4f:ba:27:58:4a:7a:86:30:58:f8:9f:
f2:ff:5e:57:b2:6b:2f:9a:dd:0c:22:f6:68:3b:f4:27:da:3f:
ad:f4:ea:a1:a6:b2:11:1d:82:63:2b:94:01:d9:74:0d:d6:f8:
05:a9:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:31 2025 by rpki-client