Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: vUKV+8DXjgWt/StQCbeZW875CbFOZ67+h9jJV9QKAVc=
Subject key identifier: 84:21:C1:A4:1B:EE:B8:F5:22:BC:70:56:05:E0:96:22:40:F8:BF:CC
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01976BF416CC82191B574E38664848859C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 09F1
Signing time: Sat 14 Jun 2025 01:00:48 +0000
Manifest this update: Sat 14 Jun 2025 01:00:48 +0000
Manifest next update: Sun 15 Jun 2025 01:00:48 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: VyFNE5jZBzgY1oxKUVPD+ARSi7fII/Zfuo7vX5dvrok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:16:cc:82:19:1b:57:4e:38:66:48:48:85:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jun 14 01:00:48 2025 GMT
Not After : Jun 15 01:00:48 2025 GMT
Subject: CN=8421c1a41beeb8f522bc705605e0962240f8bfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:88:c3:f0:65:9f:f5:9d:5a:d7:d1:88:18:
28:24:f5:e2:5f:bb:8a:13:29:81:ea:7c:2f:cc:c2:
9d:1e:1f:70:aa:ea:eb:94:45:cb:4a:51:a2:36:0c:
37:c8:77:0d:a0:aa:df:9a:a2:ce:74:3b:b5:c4:76:
99:1f:29:e8:1b:2b:ea:b7:7b:5e:02:24:65:9e:21:
67:f2:16:44:e2:ee:9b:f8:49:58:2d:2e:9a:5d:b3:
69:22:56:f6:05:e8:91:6b:13:8b:bd:3f:de:62:1e:
96:bf:9f:5b:d8:ce:20:c6:16:cd:4f:f1:1b:7e:80:
f0:f1:1b:bb:08:10:0f:c2:01:7b:c4:63:85:0e:5f:
00:59:72:b7:03:70:e3:cf:86:ec:c0:65:0b:41:6a:
fa:85:f8:26:c4:0b:c6:15:66:2c:55:6d:c3:6d:e5:
68:af:51:e7:73:b6:02:50:ff:e3:94:33:51:ff:08:
d6:c9:23:11:1e:83:8a:01:2c:e3:d2:06:46:d3:81:
d9:4e:dc:0a:b8:9b:ad:87:1f:2e:14:77:a0:31:4d:
ae:8b:dc:9b:bb:c4:1f:de:ae:6e:70:87:b9:57:dd:
c4:5b:67:66:c3:e5:07:eb:ba:c9:8c:77:ba:7d:9b:
63:60:73:5d:eb:50:20:bf:28:40:f9:62:31:34:06:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:C1:A4:1B:EE:B8:F5:22:BC:70:56:05:E0:96:22:40:F8:BF:CC
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ca:fa:f9:62:d2:91:79:00:df:96:e3:8f:40:42:e8:cd:10:
62:fc:5e:70:53:23:5b:b8:36:4e:96:73:ba:77:55:03:82:91:
e0:2d:e3:e1:f5:5c:28:1b:bd:87:a9:a8:bb:4f:70:95:00:dc:
89:7a:e0:07:ba:2c:7d:10:a2:80:e2:f9:f7:6b:42:c8:ef:b7:
05:9d:b5:b8:c1:97:d4:19:38:1b:d0:7d:87:d0:5e:65:f6:ff:
80:65:db:e2:99:90:85:4e:c2:30:fe:6a:95:47:9a:a1:5e:06:
35:a3:1f:bb:d5:1a:9e:ae:b1:e9:26:77:fa:24:64:f2:d2:8a:
a5:28:4d:a9:ed:ba:59:be:9e:a1:69:00:34:a5:dd:e2:e3:b8:
10:92:d2:57:02:39:00:da:61:08:a4:e5:6a:c6:1e:04:ff:fb:
aa:f0:62:62:36:0d:d3:83:f6:a0:28:f3:90:b3:32:da:35:8c:
75:c6:b2:4b:fd:2a:27:66:d0:a4:09:35:43:ed:84:aa:b7:3d:
cb:f8:45:e3:37:70:86:a9:8b:5e:02:75:46:8e:85:ad:12:64:
7f:d9:f6:f1:86:de:ee:41:15:e2:05:f1:92:9f:77:5f:63:66:
a4:c8:16:62:a2:95:af:d8:56:4d:e0:d2:17:e4:72:6e:4a:6a:
d9:8e:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:07 2025 by rpki-client