Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: TxiJqKK5eYDuFV07YL4E7VWzQm6vO1wxn9vyga56UAg=
Subject key identifier: 66:6B:B4:D6:45:6A:66:2B:95:DC:3B:D6:4F:86:8A:EE:7E:21:80:54
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 01976E8734844980A036EF512FF6C7D3E927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1440
Signing time: Sat 14 Jun 2025 13:00:43 +0000
Manifest this update: Sat 14 Jun 2025 13:00:43 +0000
Manifest next update: Sun 15 Jun 2025 13:00:43 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: xk1dHfZThqp1Nt4n+Vlo+I5YNKFt96SPpxZKmPrPJ6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:34:84:49:80:a0:36:ef:51:2f:f6:c7:d3:e9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jun 14 13:00:43 2025 GMT
Not After : Jun 15 13:00:43 2025 GMT
Subject: CN=666bb4d6456a662b95dc3bd64f868aee7e218054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:14:b7:47:25:b7:bb:c4:c2:ca:43:c6:d2:
e4:85:80:d4:0e:f0:b1:24:33:e8:bc:62:22:25:f3:
4f:17:8b:cc:d2:c8:1e:f6:df:0a:71:4d:57:37:d7:
52:54:5a:fc:04:fe:73:3e:65:27:6b:a2:10:8c:fe:
82:88:0c:21:54:84:7f:d0:ce:a0:ff:7a:4e:06:e1:
ed:b5:99:dc:20:20:b3:6f:8f:80:8e:5e:d8:36:db:
87:55:63:38:38:7d:8b:3b:ed:96:35:3d:cd:a1:4e:
ab:ba:ac:24:40:a6:14:e8:c8:d8:a9:df:47:33:80:
77:5e:67:b5:bd:f9:8e:02:0e:16:46:d7:b3:9e:0f:
f5:f8:ad:82:18:17:a6:5e:25:a7:e4:8e:c5:8a:e2:
b6:a7:b5:f6:e9:50:7e:4e:f4:f7:f9:a0:72:92:80:
5c:af:7d:da:08:74:43:d9:68:ac:37:f9:95:6a:ab:
9a:12:6d:e4:6f:b3:42:c0:84:ae:4a:17:71:aa:36:
52:b3:dd:a2:a6:ec:83:43:5a:a7:a6:5a:0f:02:b4:
49:ce:c2:59:4d:1e:9e:95:c8:03:99:57:7f:a0:f7:
16:59:5e:69:99:03:7b:30:17:e3:80:32:5f:71:46:
8c:dd:d2:0f:3c:ab:86:0a:e1:03:f8:d9:92:34:e8:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:B4:D6:45:6A:66:2B:95:DC:3B:D6:4F:86:8A:EE:7E:21:80:54
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:f3:ab:87:3b:d7:46:96:14:43:04:11:b0:01:51:3b:a4:
da:c9:5b:15:76:54:92:08:46:5c:32:eb:4b:64:39:f7:58:32:
1d:86:5d:09:ab:d3:4f:13:d9:5b:3c:b9:0a:b5:a7:97:60:7d:
53:14:06:c3:da:4e:67:c5:96:19:42:62:ad:b5:76:4a:c3:ca:
73:d4:a8:67:3a:9e:48:48:07:b7:00:fb:8b:4d:01:21:a2:5e:
62:93:b7:48:9e:67:e0:7d:4c:f5:a8:db:3a:06:13:ff:94:f1:
cf:bf:95:1e:1c:a1:ab:2a:21:6b:11:0e:df:4d:70:84:f3:1d:
0d:a7:e9:ed:89:66:90:58:7b:11:15:37:87:96:8f:5b:1d:5c:
6d:f2:93:9d:fa:e2:98:a7:2e:b9:8b:74:d4:af:f9:76:c3:81:
e5:df:fe:56:5e:99:75:5a:0e:00:04:7c:aa:52:3b:fe:72:48:
81:c9:57:82:87:e2:51:d5:f2:24:52:4b:2b:a3:21:c0:e0:88:
73:e5:b0:02:55:32:88:65:47:a1:6d:99:43:40:70:fb:12:cc:
70:a5:6f:1e:80:3c:0e:fd:b5:d1:3e:62:da:be:59:52:e5:50:
bb:bd:c4:e2:96:af:ce:b6:15:71:40:b5:8d:c1:19:18:c4:2e:
ed:08:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:08:48 2025 by rpki-client