Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: PdgbTVxI7XvYQ2VCgmZvf7ASkT4hHJvHOOXYod49lmc=
Subject key identifier: C2:79:C2:7B:ED:80:29:D4:6F:5D:36:83:29:39:09:A4:9B:5D:AB:39
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 0197884713D59CE6E98474969557D1B251B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0E35
Signing time: Thu 19 Jun 2025 13:00:48 +0000
Manifest this update: Thu 19 Jun 2025 13:00:48 +0000
Manifest next update: Fri 20 Jun 2025 13:00:48 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: wFiWcjupRQKtirDCTswrc2CD004f/m4vooVTEajH6b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:13:d5:9c:e6:e9:84:74:96:95:57:d1:b2:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jun 19 13:00:48 2025 GMT
Not After : Jun 20 13:00:48 2025 GMT
Subject: CN=c279c27bed8029d46f5d3683293909a49b5dab39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:40:4c:57:12:0a:5f:c1:0c:3a:ec:8e:3f:
30:95:95:92:99:e0:2d:b6:ad:f1:6f:3b:f3:ad:24:
3f:eb:a1:55:70:4c:bc:a5:0e:07:e8:64:11:f7:4e:
23:3e:46:69:a0:12:5d:de:bc:94:26:54:34:16:7a:
f1:3b:45:af:a6:94:de:80:7e:27:11:3c:0c:26:aa:
b5:92:00:ff:38:9e:e2:56:49:2f:0d:21:70:b3:97:
d7:9b:3e:77:5b:15:2a:9c:3e:01:0b:6b:0f:02:ce:
11:2e:51:0f:51:da:85:ff:64:15:e2:55:98:da:42:
e2:c0:11:96:96:7c:43:aa:a9:1d:4a:98:31:6a:4b:
49:60:74:e0:54:81:72:c4:25:a3:48:ce:61:f4:d5:
1a:62:db:89:ed:cb:bb:9b:af:c1:0e:ef:0d:ed:b9:
d7:b4:f7:87:28:52:c9:5c:c4:69:28:3e:d1:6d:81:
e2:a2:f9:06:05:6a:b4:d7:df:cf:07:fd:6c:0d:8e:
44:25:09:ec:ce:90:0e:27:38:b9:ee:65:20:2c:76:
23:b2:cf:08:c3:3d:92:31:c3:22:9b:ba:79:04:00:
bb:33:71:e4:01:6b:d0:31:bf:ab:80:37:56:36:d4:
3a:bb:71:62:23:98:1c:3a:e9:17:b4:7a:64:6a:eb:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:C2:7B:ED:80:29:D4:6F:5D:36:83:29:39:09:A4:9B:5D:AB:39
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:32:39:0a:61:db:ce:53:96:40:91:33:a5:2c:50:a5:79:30:
ed:6c:ba:a7:b8:2c:f3:1b:7e:1d:28:bc:c3:31:10:47:ae:51:
1b:ef:34:26:51:e1:24:7f:15:aa:c9:4f:e4:d9:10:00:00:d7:
62:9c:9d:5a:5b:09:26:ab:be:d3:19:7d:57:e5:5c:61:f4:44:
37:f9:b0:9a:ee:fb:3f:08:2c:f3:b7:78:4c:e1:ab:0e:69:7a:
a4:6e:86:2d:54:a8:72:a5:ff:4f:de:0b:a4:23:56:69:38:14:
f4:bc:d2:7c:af:d6:1b:33:62:2b:7b:66:05:91:61:50:a0:c9:
40:e8:95:f7:5a:56:28:86:bd:c1:ed:54:3e:dc:1b:fa:e5:e7:
e3:af:84:ed:1a:f9:c6:45:45:9e:31:ed:ee:78:27:99:e1:34:
c1:13:11:78:e1:c4:61:c1:10:07:b9:3a:bc:7e:36:34:47:4e:
2c:f2:00:38:d7:5b:80:b3:d8:58:f5:ab:c5:d0:9a:0d:b0:75:
65:63:77:2b:13:a1:c3:8c:63:a7:10:64:7f:64:4b:6e:8f:4f:
f6:18:21:1c:f9:d5:20:75:dc:9c:a1:64:28:14:63:e9:45:79:
9f:e5:1d:0a:72:c5:11:a1:01:ac:f9:47:74:e2:5c:26:ef:10:
ae:26:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:49:47 2025 by rpki-client