Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: d7u9cPPOcQ5u+Irg2uOLkzTNxTaWYt+1aU1WQ7K6ll8=
Subject key identifier: 54:DF:AB:69:54:0D:46:80:67:70:CD:EB:61:D8:EE:1B:E0:51:B7:AA
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 01977007F9BFF9946D2F44037C41175D2326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 20:01:00 +0000
Manifest this update: Sat 14 Jun 2025 20:01:00 +0000
Manifest next update: Sun 15 Jun 2025 20:01:00 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: QtETwTdNRGI8CTqL3hVgYhb8FoPMcF4zkOmq0OPOCEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:f9:bf:f9:94:6d:2f:44:03:7c:41:17:5d:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jun 14 20:01:00 2025 GMT
Not After : Jun 15 20:01:00 2025 GMT
Subject: CN=54dfab69540d46806770cdeb61d8ee1be051b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:11:8f:91:22:d9:a6:6f:52:05:b8:8b:d1:
75:a8:9a:8c:27:15:0c:da:97:cd:2f:a6:35:16:df:
b5:ca:46:10:b9:ad:c5:fa:3b:14:05:0c:10:ca:3b:
27:da:69:06:c5:cf:4b:00:65:66:d0:9f:cc:0c:5f:
65:b8:67:3d:25:a5:95:f3:11:5a:c8:8b:6c:e5:85:
a4:92:9e:4d:ec:40:01:e9:3c:b4:3d:57:16:0b:7c:
d8:21:bb:82:6e:83:dc:03:47:45:06:cf:bf:07:5d:
52:89:21:76:2b:99:a8:a5:a8:43:e8:2c:a8:da:33:
a7:56:e5:81:2a:cf:12:51:9b:ef:4c:f3:f9:98:c1:
07:ed:cf:03:37:fa:89:a0:f1:df:ab:81:fb:1a:a5:
a0:9e:4a:bd:8d:75:8a:c1:cb:2e:fe:da:18:8a:42:
a1:09:a3:3c:9a:a5:1a:fa:c4:f6:b6:19:96:fb:36:
43:a7:1f:f6:60:d1:67:ef:c2:1e:dc:80:81:ed:6e:
cb:6b:91:24:f6:1c:1d:13:05:d3:3d:c0:5a:0e:27:
5e:ab:0e:d8:66:54:78:ab:50:c5:57:6b:21:72:a8:
27:a4:ad:cf:45:37:ee:29:a6:4a:08:09:c5:38:dc:
65:a1:b7:e4:62:93:3b:26:2f:05:f9:5e:74:70:a8:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:AB:69:54:0D:46:80:67:70:CD:EB:61:D8:EE:1B:E0:51:B7:AA
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5e:ef:ef:5c:c4:77:58:74:a6:81:e6:77:b5:39:4b:b9:55:
b4:e7:f4:8e:33:56:7f:0a:83:82:70:6b:6c:78:09:40:c0:21:
d3:f0:b1:5a:1a:85:ce:30:bd:fe:45:d1:d0:33:21:f6:ca:2c:
cb:27:bc:9a:b0:c9:02:ca:50:0a:92:1c:56:7e:e3:11:ff:1f:
d3:8d:c4:12:3e:02:83:d3:ee:41:1f:01:bd:f3:77:e1:3a:24:
09:34:13:83:a1:ce:4e:ef:29:71:45:ee:9e:b7:47:87:5e:15:
f2:72:82:ca:5a:fe:25:e2:45:00:dc:10:2d:16:9d:40:25:c7:
30:5f:f9:f4:14:12:d4:9b:77:f6:dc:9b:a0:ef:66:78:85:a5:
60:77:a7:42:6b:db:7e:8f:a4:8a:44:1a:f9:c2:85:2c:66:58:
34:f5:d0:d2:c5:0e:e5:a6:79:2a:6b:ef:fb:b5:7e:5b:14:37:
a2:72:06:61:34:3f:22:4a:33:fa:5c:71:de:0f:77:4b:be:ea:
40:69:33:51:69:6f:c9:7d:d4:ef:74:4d:88:95:12:dc:32:d9:
38:85:19:b0:2a:0f:40:82:58:02:ac:d3:96:92:96:df:41:4d:
18:96:27:34:0b:0c:7b:d9:45:24:43:d7:8e:43:32:67:d2:55:
4c:c3:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:16 2025 by rpki-client