Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: WAcmd69aWI06Qr05p2XhG8/sGrlbquQkOj8PssTP9Kk=
Subject key identifier: 7E:45:D5:7D:A6:67:B8:15:FE:31:43:EE:B3:98:B0:B3:A0:C2:15:31
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019770AC8DA49C5B073DB31474CBE57CD9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 146A
Signing time: Sat 14 Jun 2025 23:00:46 +0000
Manifest this update: Sat 14 Jun 2025 23:00:46 +0000
Manifest next update: Sun 15 Jun 2025 23:00:46 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: MBS/KPve4XDiJJ5cwBl95cHdG9lxdZJNrMhwo7P48wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:8d:a4:9c:5b:07:3d:b3:14:74:cb:e5:7c:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jun 14 23:00:46 2025 GMT
Not After : Jun 15 23:00:46 2025 GMT
Subject: CN=7e45d57da667b815fe3143eeb398b0b3a0c21531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:96:10:3c:19:ea:55:b7:b2:7d:62:6e:a6:
f4:02:ef:cf:a5:c0:e0:e8:71:26:bd:fb:44:ad:c9:
c3:82:01:2e:e6:eb:0c:13:c5:13:70:38:b8:2c:da:
3c:f4:57:6f:f8:43:aa:a1:5a:8c:47:36:c9:9c:5d:
57:74:e9:a2:a3:d4:53:72:5d:a5:16:e8:9c:ce:57:
f7:a0:e5:fa:9a:c4:b2:0b:b5:60:94:c2:a8:76:2c:
1c:be:0e:23:1f:df:ae:c8:93:88:ac:48:33:7e:05:
f4:8a:b7:07:b8:63:d1:a3:e6:62:9a:f6:a6:0c:4b:
75:c9:36:79:d1:9d:e9:67:a4:3d:5c:56:89:00:9b:
6b:ff:4a:b2:b4:4e:d4:03:44:ee:59:42:16:4e:02:
ae:7e:e6:22:1c:f6:3c:5d:38:82:89:fc:b2:06:5b:
fe:46:d7:f4:93:0a:92:92:e7:64:c2:b1:54:9b:6c:
e0:0a:80:a7:5a:b7:b5:33:e1:47:e3:71:3e:90:ca:
06:de:e3:44:10:3f:d2:53:67:f8:69:75:3c:8a:91:
61:82:5a:88:63:db:22:c5:9d:6c:fb:08:75:0c:3e:
8a:6e:56:c5:c8:fb:b0:52:eb:81:90:95:f9:b5:ec:
c4:a0:c2:2e:ee:5c:c7:83:33:55:e4:a5:45:f1:5e:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:D5:7D:A6:67:B8:15:FE:31:43:EE:B3:98:B0:B3:A0:C2:15:31
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:1f:39:2b:13:e8:10:b8:51:ab:37:ef:1b:55:06:68:28:
41:8f:ba:ee:20:fc:a3:a1:9a:b8:c9:11:67:f5:e4:7c:3f:ff:
d2:ce:c5:9b:0f:14:f6:ca:ba:91:60:af:e4:f0:d4:e4:95:99:
7f:dd:fe:3c:89:23:38:30:2a:1b:33:83:ae:20:d6:df:5b:e3:
82:af:c5:96:2d:bf:d9:67:18:5b:df:46:f5:6a:ff:5b:3d:a1:
c0:dd:b5:d1:22:88:69:2f:43:75:96:98:92:2f:c4:61:b6:b7:
e5:2e:ea:a6:95:87:53:bd:cb:fa:4d:cc:f5:d6:3c:54:63:0f:
ae:e5:2b:32:56:19:9d:cb:f5:87:61:27:3c:30:ee:94:05:08:
2e:6a:2f:c4:af:09:27:c2:12:06:8c:5e:68:a0:e6:5f:92:b0:
17:69:2e:2c:e9:ac:fb:6b:ce:86:1b:1a:b8:dd:54:64:38:0e:
d4:a1:74:97:54:c3:f5:50:77:2d:55:1f:74:a8:2e:05:8d:c0:
4b:e2:45:aa:b4:fb:88:f6:27:61:c8:30:1d:c5:11:0e:53:cb:
44:ba:66:2a:b3:de:de:71:4a:45:18:40:91:d4:86:96:07:ac:
6f:aa:b5:3d:07:ac:13:0f:d5:cf:b4:b9:29:25:dc:67:bb:87:
a8:fa:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:06 2025 by rpki-client