Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: oe88Cp56rUE8ojAW+roFqcRdqiXGtE4A8ViVX7ITKdY=
Subject key identifier: 4F:04:3B:6A:C5:35:29:A3:CB:0C:A2:20:01:14:6F:E2:04:63:05:D2
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019778D4458620FD58755CF35D2C7FAA1948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 09A2
Signing time: Mon 16 Jun 2025 13:01:06 +0000
Manifest this update: Mon 16 Jun 2025 13:01:06 +0000
Manifest next update: Tue 17 Jun 2025 13:01:06 +0000
Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: 2vbVE0g0gZoep8fAewuVaHglwVlTHFgGF3ooKSkEQ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:45:86:20:fd:58:75:5c:f3:5d:2c:7f:aa:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Jun 16 13:01:06 2025 GMT
Not After : Jun 17 13:01:06 2025 GMT
Subject: CN=4f043b6ac53529a3cb0ca22001146fe2046305d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:0d:79:94:e3:cc:8f:7b:e4:6a:21:5b:4a:
b2:50:f2:e8:6b:a8:ca:49:65:0b:1c:e7:b0:09:b6:
fe:f1:c1:46:64:fa:43:fa:ed:63:49:c2:bb:98:b1:
07:c0:3d:a2:16:19:d0:6f:7e:17:c0:60:20:64:37:
61:64:3d:2d:fd:54:73:e4:e5:4c:dd:89:d7:bb:a5:
6f:84:47:b4:6e:91:93:ae:29:c9:58:0f:dc:b2:f1:
57:f6:d5:9a:b0:73:f1:e8:39:60:d8:07:be:d6:6a:
b4:db:34:c4:95:b6:07:df:d0:f1:6f:06:d8:38:3b:
ff:fa:85:d6:db:8c:95:ec:ce:86:a9:c5:cd:a4:1e:
fe:73:d5:21:55:64:b8:01:18:50:54:59:ca:1d:49:
4f:1f:7b:37:30:e8:06:0f:92:5c:db:67:1f:7b:00:
36:3f:79:e2:54:63:9b:8c:8b:47:da:5e:ad:5f:f7:
09:3d:57:33:0b:ae:80:f8:e1:e2:5f:2d:ef:39:98:
d9:30:08:ec:f1:b0:85:bf:05:6f:c6:26:f9:80:d7:
dd:18:b7:e2:02:e2:e3:bb:31:b9:1a:e6:04:65:f8:
8b:d6:8e:6b:d3:50:ef:53:cb:1c:15:77:1a:2e:b1:
47:12:38:23:68:a1:8e:93:b5:3e:65:ce:e7:cb:e9:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:3B:6A:C5:35:29:A3:CB:0C:A2:20:01:14:6F:E2:04:63:05:D2
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:58:ef:77:8f:e0:e5:9a:2d:12:23:19:e4:45:78:fb:af:
dc:32:b9:25:64:9f:45:d8:30:3b:37:3e:72:5a:2b:07:25:72:
19:2f:92:63:c4:7f:e9:8d:20:e9:a8:f2:cb:46:c5:ae:23:5d:
13:93:ba:0d:3a:0e:0a:6d:83:01:c6:0b:3f:c9:cb:55:31:b6:
0e:52:cd:37:1f:08:bf:3b:37:a6:c8:d3:4c:d3:55:1e:0f:4c:
10:ec:d1:8b:2f:50:1a:0d:82:c1:db:18:b0:c1:d9:11:3e:6a:
a2:e1:4b:a8:9a:a3:c8:f3:74:ac:b6:b2:ec:20:5e:c1:c3:eb:
0e:88:bf:4d:20:e6:41:91:72:20:93:2c:cd:07:ff:d9:1b:61:
6c:e5:27:ae:40:b2:5c:84:11:54:b1:d4:1e:85:d2:e5:14:25:
53:b3:08:c4:73:e9:ee:d4:54:87:eb:42:fa:23:d7:8a:84:2d:
10:83:d8:60:88:36:fe:49:49:d3:cc:49:26:50:a8:e2:0b:48:
d1:f8:af:cb:21:39:12:0e:06:fa:6d:ac:52:34:50:2c:71:8c:
b1:a1:95:4b:f6:1b:f6:d2:45:a3:24:c4:81:0e:af:f6:11:83:
37:be:95:dc:cf:94:3d:a0:8b:60:bc:d5:e4:c5:7d:3b:1b:58:
92:c1:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:37 2025 by rpki-client