Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: U2IKHO1ghwquGy3tJLwluQALI/krAs1mPrXFeXnNGmA=
Subject key identifier: 4D:E3:68:BC:45:DB:8B:22:DB:DF:94:D9:F8:72:D3:93:F9:A4:81:AC
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01977F0D27930B8D3539A50458C32C35A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 159B
Signing time: Tue 17 Jun 2025 18:00:57 +0000
Manifest this update: Tue 17 Jun 2025 18:00:57 +0000
Manifest next update: Wed 18 Jun 2025 18:00:57 +0000
Files and hashes: 1: CcJJz4LHqBfVmqebSCbbfSxazO4.roa (hash: NpYxNXz/TsGqoMRv+WmEIOF956M+rNYVRpeLiIuXSLs=)
2: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
3: O9n2W45IL4ZPQ7ySmP_wgMSjmM0.roa (hash: LHjzPi1frnVBcp5q4ol11nwZf0XWlDw2urze+/Pgr4A=)
4: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: IZcnR960e61Zv4MlnrfTQrT1cVy72GaJyJlBgdIncU8=)
5: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:27:93:0b:8d:35:39:a5:04:58:c3:2c:35:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jun 17 18:00:57 2025 GMT
Not After : Jun 18 18:00:57 2025 GMT
Subject: CN=4de368bc45db8b22dbdf94d9f872d393f9a481ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:d2:90:af:13:30:19:69:75:da:13:5d:9b:
d0:17:6e:04:15:50:f9:db:c6:d9:d8:d9:a4:69:ab:
eb:76:bc:3d:fe:87:50:a2:eb:59:c1:07:57:e0:90:
4a:22:db:26:a4:ee:ec:10:1a:db:2f:24:ca:64:7e:
5f:46:02:3c:0c:15:c8:52:dd:d7:d9:06:5a:6a:56:
6c:92:ee:48:1b:8e:76:2c:38:44:4e:de:9f:57:8d:
f5:14:3f:65:18:c5:2d:32:4b:0f:94:42:38:37:a9:
8f:9b:f3:39:00:02:86:fb:3a:e9:39:3b:f8:56:63:
d1:a6:8b:34:57:8c:88:11:fb:a9:59:4b:ec:90:83:
53:e4:2e:1d:e0:b3:b0:bc:bf:2e:e5:e5:6f:70:e7:
49:46:1f:0c:fc:f6:f2:98:37:df:27:35:ff:99:14:
a1:c1:93:db:45:8a:89:26:5d:b4:db:8a:f2:ac:49:
cf:fe:15:73:61:4b:69:41:9c:cf:06:6a:55:55:36:
51:d9:b5:16:b9:53:a6:94:16:ff:2b:12:b2:d6:2c:
26:7e:9c:50:33:25:c7:26:b9:bb:b7:d2:bc:11:7d:
68:19:c2:a2:b8:72:98:09:5b:7a:f7:c2:8f:17:66:
15:0b:81:dc:e7:30:d7:be:6a:84:92:7c:21:47:77:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:68:BC:45:DB:8B:22:DB:DF:94:D9:F8:72:D3:93:F9:A4:81:AC
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:84:a1:2e:ce:25:d5:3b:52:82:ca:55:c0:f5:e9:7f:d4:
26:6d:6c:bc:06:75:7d:5e:d5:3d:5a:6c:a5:37:6d:fe:de:af:
03:9f:bd:04:e2:a5:9c:5c:79:b3:3a:9b:a3:53:4a:64:f5:8a:
83:d7:d3:a1:2d:81:7d:44:d1:ca:b7:1e:88:09:9b:8e:74:e1:
b8:c4:4c:98:cd:ad:9e:20:3c:fe:7b:3d:76:12:e3:e3:ad:df:
61:cd:b1:5e:e6:67:24:b3:5c:c2:08:13:ca:fe:f4:f9:ad:5a:
ce:c1:12:60:16:42:90:1c:9e:f3:e2:05:92:11:af:29:a0:ed:
ce:dc:d0:f4:2e:0c:0b:1d:08:29:18:d0:0f:62:1b:90:e8:a5:
d4:8e:87:1c:76:39:8a:a8:1a:53:8e:3c:8d:f0:c0:3b:a9:fd:
75:34:32:6d:b9:4d:81:a7:fc:36:2b:b9:0a:47:38:e2:72:38:
35:07:64:c7:df:8a:b2:a7:33:42:84:b4:45:1d:13:e0:f0:6f:
78:ab:cf:43:db:c6:ce:54:c4:12:7c:03:5f:da:83:96:e4:9e:
38:81:bc:07:29:2a:45:c9:34:de:84:bc:5e:eb:d2:58:c3:24:
06:0e:9f:89:3f:71:7d:cc:cc:bd:05:f3:59:63:9b:15:4b:ef:
52:34:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:22:54 2025 by rpki-client