Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier: 8UNZmnXdGOl4dqNHsVE1exMVmysV6EeAaDLwPorsyRg=
Subject key identifier: 36:34:AF:29:FB:CB:8D:A5:6C:EB:E6:2E:3B:10:9C:6C:20:9F:66:ED
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 01977489591F6870558C701046BB533DCC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number: 0CF4
Signing time: Sun 15 Jun 2025 17:00:47 +0000
Manifest this update: Sun 15 Jun 2025 17:00:47 +0000
Manifest next update: Mon 16 Jun 2025 17:00:47 +0000
Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=)
2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: dsJGuzJfBzQ+siADRTwossdSswYc1gyeodsLkw0bBWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:59:1f:68:70:55:8c:70:10:46:bb:53:3d:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Jun 15 17:00:47 2025 GMT
Not After : Jun 16 17:00:47 2025 GMT
Subject: CN=3634af29fbcb8da56cebe62e3b109c6c209f66ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:87:7a:b3:95:13:38:b5:a3:99:92:f1:59:
a3:16:a4:4b:cc:db:51:93:db:37:0d:74:6c:6e:c2:
22:ce:92:bf:d3:6e:bc:1b:f8:1f:09:89:f2:98:29:
93:e8:7a:62:49:41:37:52:cb:48:37:f6:33:64:09:
e0:e9:50:59:eb:67:bd:9f:2d:a1:8f:f4:a8:82:fa:
09:02:a0:d9:bc:0d:19:d7:d8:c1:81:2f:56:a1:0c:
2b:22:df:fa:a0:0b:77:dd:71:81:e2:25:81:1c:86:
d0:e1:ab:7e:fe:b0:ba:b6:72:2e:8a:18:e2:38:6a:
0d:84:5a:1e:0b:60:3d:e9:f3:e5:d3:4d:bb:4e:4c:
27:1a:fa:2f:d7:0b:7a:16:c7:50:52:d5:93:18:fd:
9f:96:c5:07:76:7a:ed:a7:8f:34:45:2a:6d:a3:30:
fe:88:87:c8:4c:1c:9e:92:8a:db:04:36:9b:5d:88:
a0:23:26:6d:36:f7:d3:e4:09:a6:dc:8c:be:d1:d4:
bf:f5:6f:b1:7c:bb:95:61:48:9d:a2:43:30:fe:c3:
df:60:cd:92:8e:3e:f0:87:43:ef:26:4a:de:68:ec:
54:9a:fd:98:11:f3:b2:b2:bb:3d:c4:0f:16:9b:82:
ff:c1:28:a3:47:ea:ab:90:84:48:31:b4:c9:9b:f3:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:34:AF:29:FB:CB:8D:A5:6C:EB:E6:2E:3B:10:9C:6C:20:9F:66:ED
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3e:b0:5f:80:67:48:d3:ed:10:ee:8a:74:73:04:e7:34:4d:
5b:04:f9:87:dd:10:4c:1c:8b:f2:d7:6d:3d:9b:a3:e0:65:df:
ba:98:b7:6e:21:d7:c9:63:0d:17:62:72:12:17:1e:7c:49:db:
cf:7d:1d:e0:26:bf:79:3a:e9:e9:0b:e4:79:4d:0a:5c:23:f3:
4a:89:99:d5:2d:10:95:7e:a9:ad:ee:19:fe:dc:1f:bf:42:b7:
99:f5:47:6c:4e:4b:5e:f1:1b:94:b6:b4:05:fa:2e:35:01:be:
ca:e8:51:8f:e5:97:bc:36:90:1f:76:02:d1:2f:79:4e:b8:30:
99:c9:76:80:9f:ce:8c:b7:66:54:f2:05:46:b3:bf:aa:18:35:
f2:bd:e8:1e:65:4c:fb:19:4d:4b:5a:c6:98:73:31:35:f7:33:
e3:ed:71:c6:3a:eb:37:55:41:13:a6:95:6a:97:2f:0c:dd:0e:
b3:bf:1c:65:99:26:87:9b:16:45:d8:d2:af:66:da:05:2d:73:
4e:68:e2:7f:c2:d1:23:1b:e0:52:67:e9:3c:b9:da:52:7a:e4:
29:2d:f0:ac:ec:cc:8e:9c:ee:91:01:f0:b3:0d:73:ac:7d:f1:
20:48:ee:76:1f:cf:65:71:33:cc:e4:8c:9e:7b:85:1d:80:53:
ec:aa:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:21:49 2025 by rpki-client