Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: +CIxlmjpUJ2NnAsUX+TRCJcQgz4zXL8AgDkYvunYKt8=
Subject key identifier: 8E:86:6A:52:57:A1:9F:57:76:95:AE:09:F8:22:8F:88:F1:15:45:22
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019768BC29D469175B6A75025B5713A4316A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 1552
Signing time: Fri 13 Jun 2025 10:00:51 +0000
Manifest this update: Fri 13 Jun 2025 10:00:51 +0000
Manifest next update: Sat 14 Jun 2025 10:00:51 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: TBAgoWXjMHETlLmXQTWrmJ6tHto3ufoWhAcxoUDo9Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:29:d4:69:17:5b:6a:75:02:5b:57:13:a4:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Jun 13 10:00:51 2025 GMT
Not After : Jun 14 10:00:51 2025 GMT
Subject: CN=8e866a5257a19f577695ae09f8228f88f1154522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:03:13:1d:8c:9b:8a:23:5c:03:7a:2c:30:
57:7a:a4:ce:19:ac:46:2a:76:96:bf:ee:4e:5e:f4:
b3:48:24:f8:a0:f7:73:04:8c:83:0d:fd:dc:8f:3c:
e7:ae:06:30:64:cd:aa:4e:ad:49:37:f6:ee:fb:64:
4f:ee:37:d8:de:0a:f7:43:35:f2:a3:af:42:2c:6d:
25:a4:71:61:77:b7:a4:35:a3:e1:df:9b:b2:9e:4f:
bb:36:e0:07:3a:d0:20:da:3a:8a:75:af:6c:a6:a4:
2b:bb:da:88:77:f1:1e:8e:65:88:51:9e:d2:ff:e4:
a4:d1:7c:84:27:89:54:cd:92:48:46:71:fc:15:cf:
da:65:5f:6f:3d:c9:08:12:c6:a5:b2:07:a3:a6:60:
b0:78:61:95:1e:b0:6b:bf:dd:db:74:05:60:0d:3d:
3e:be:4c:15:e5:58:82:76:63:74:fa:0d:58:5a:26:
9f:65:99:30:ea:69:4f:79:7b:47:d5:dc:3c:fe:68:
b1:79:cd:78:22:08:a1:e0:6a:d9:43:03:4a:96:a4:
26:e1:e6:c1:a7:b0:5b:41:10:9d:0d:91:02:a1:b3:
f0:9f:b4:73:b1:10:99:ed:79:c8:d8:26:fd:67:b4:
e8:39:2c:78:47:72:48:92:7d:0a:21:56:62:c1:79:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:6A:52:57:A1:9F:57:76:95:AE:09:F8:22:8F:88:F1:15:45:22
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:31:ea:1a:24:57:51:1e:f3:9d:92:fe:e2:ad:f3:58:74:
0f:a9:56:51:1f:49:d1:82:c1:ca:7e:05:52:ea:d5:6b:6d:5c:
06:35:67:9f:50:3b:ba:64:c3:7f:9f:e5:86:ed:e5:04:a9:5e:
fe:6c:a9:b2:c9:65:37:3b:3b:4c:1e:b3:d4:bd:5b:b6:92:4e:
4d:d2:29:23:1b:b9:74:57:08:21:b6:1c:29:a3:6a:aa:f9:14:
97:b8:fb:fb:ff:41:a7:51:4b:03:53:c6:27:92:f7:0e:9a:4e:
73:dc:7b:16:2d:59:cb:f5:8b:96:3a:2d:d5:d2:60:5d:38:2e:
53:a0:5a:ad:b7:07:1c:b0:04:f0:ed:fe:22:1b:9c:e4:b7:a3:
6b:bf:2c:1b:ff:18:66:34:85:30:ee:25:13:50:dc:16:93:81:
48:fb:de:15:fa:2f:7d:12:9a:9e:0b:37:ee:77:27:e6:05:2d:
8b:11:1f:e9:58:75:38:2c:95:f5:01:d8:b6:32:ce:7a:b7:f7:
82:c6:0b:5b:78:6e:3c:54:cc:bf:de:93:83:dc:15:53:b5:e8:
a9:1a:39:5a:85:86:75:97:2c:e7:fd:c6:60:a3:a7:c3:cc:74:
03:27:8a:85:dc:b9:26:80:8a:71:fe:55:49:21:5e:6a:3a:20:
29:a3:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:53 2025 by rpki-client