Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: l/qHqcl28elCsx3cpuPQcY3k0+CkuJ+m7sA8ephUCIE=
Subject key identifier: 47:5F:0D:AE:C6:79:96:D1:E6:CC:98:A2:C2:29:A7:64:40:51:C4:1C
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 0197764094B9202222A306BC93932523395E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 15A6
Signing time: Mon 16 Jun 2025 01:00:33 +0000
Manifest this update: Mon 16 Jun 2025 01:00:33 +0000
Manifest next update: Tue 17 Jun 2025 01:00:33 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: SpHUWLNyxLgas5V2FPq7+bs19u1Q0bixaT0QYR+ZHTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:94:b9:20:22:22:a3:06:bc:93:93:25:23:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Jun 16 01:00:33 2025 GMT
Not After : Jun 17 01:00:33 2025 GMT
Subject: CN=475f0daec67996d1e6cc98a2c229a7644051c41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:f7:8f:62:80:c2:c9:d8:6e:77:16:e9:09:
a1:01:54:e5:50:25:ac:35:1b:b7:e1:ff:31:e3:34:
91:ee:8b:18:eb:0b:9b:df:e3:9b:bb:49:65:c9:66:
69:ad:89:b8:c5:d1:3e:de:3d:49:7b:02:1d:85:22:
11:f3:d9:46:45:34:cf:44:51:3e:5a:1a:d4:35:c1:
c6:95:84:b5:4f:18:6b:a5:b5:2f:1a:97:ab:48:0a:
6f:a5:54:34:05:39:e3:14:ef:f1:0e:ed:77:d0:73:
04:ac:78:77:d1:f7:6e:61:e7:0e:46:08:54:0d:91:
c9:27:ef:48:81:8c:70:0a:33:05:88:2c:da:6f:8a:
5a:e3:2f:ae:b0:6a:72:88:57:b4:c2:ad:7f:7e:41:
50:ed:48:a0:d2:40:ce:49:eb:7b:da:bc:53:e2:7a:
25:60:99:6f:c2:e4:27:d8:2c:1f:65:58:e3:61:dd:
95:d7:90:ad:87:02:10:07:3b:63:b4:82:f2:d3:47:
96:6f:41:a1:26:c6:77:5d:c3:db:cd:4e:ec:4e:a4:
f9:10:10:f9:88:1e:35:5f:7c:34:77:d2:19:6d:40:
81:b3:af:ba:57:3c:d4:32:14:2d:38:9c:38:1d:d8:
6c:a0:16:6c:5a:e9:bc:93:e5:13:de:f8:1d:46:7f:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:0D:AE:C6:79:96:D1:E6:CC:98:A2:C2:29:A7:64:40:51:C4:1C
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:24:6e:de:1c:ca:bc:11:3a:b8:c9:5d:07:09:7c:2b:e9:
bb:0c:54:2c:a5:05:d1:8e:27:dd:bf:5f:b9:ed:d6:36:ea:64:
7d:4d:6b:78:69:72:8b:03:0d:d6:65:01:84:9e:8e:bd:73:21:
81:ab:10:17:9b:0b:ba:33:a5:2d:cd:fb:01:3f:54:23:55:53:
3e:85:30:b6:70:08:65:96:06:64:b0:70:0d:cc:ec:e9:eb:6c:
19:d6:80:45:18:8e:df:63:ff:21:04:78:e8:e1:be:9b:04:4e:
4b:9d:d1:b9:a8:3c:ca:44:56:3b:89:da:eb:68:01:6d:26:74:
40:e9:f5:88:ad:0b:97:a6:ff:73:5d:d6:42:65:c2:bf:83:a0:
a7:c8:3f:b2:97:28:87:57:1f:d2:fd:5f:c2:d0:32:9d:74:9f:
4e:2e:aa:1d:ba:4a:89:f5:88:fa:e1:cf:37:47:74:c2:2a:75:
48:4e:fb:e2:df:6d:f4:c5:ec:02:1e:84:1f:07:51:72:17:3c:
d9:3e:e9:6d:63:a3:f2:16:3c:e3:67:f1:e2:7e:56:9e:87:29:
3b:d3:f9:41:c5:51:c1:52:80:29:f9:a4:d8:ca:77:dc:ad:ba:
91:f6:2a:e8:77:cb:ff:3a:28:61:ab:22:16:a7:8c:e8:f8:c3:
1a:7e:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:53:33 2025 by rpki-client