Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: HsTmk75BeJVFyPGE03BZD/5PpRsxTTKwxnBT/LfpXXM=
Subject key identifier: 40:BC:B6:9D:40:6C:E2:64:E9:03:54:A8:25:49:C9:22:FB:C8:68:DB
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01976EBDFD27F103210F9B0292026BAC507B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 03D6
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: lvDASR+zbYkFgGO+j8UMdVoWSmkleezuHGmzm5uS1j4=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:fd:27:f1:03:21:0f:9b:02:92:02:6b:ac:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=40bcb69d406ce264e90354a82549c922fbc868db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:42:76:23:49:bc:71:4b:45:26:b6:61:cc:
55:98:5e:3d:b7:be:fd:fe:7e:90:dd:3e:95:65:ea:
b6:34:18:b6:5e:6f:a5:e8:4d:c0:ed:3c:34:de:9c:
c6:28:79:9c:45:74:38:0c:a9:8e:0b:1e:5d:6d:76:
9c:d4:dd:55:85:44:ed:e3:51:71:11:53:0a:6c:e8:
50:e3:dd:7a:3a:91:e6:57:69:ba:b8:bf:e8:f5:f6:
70:7a:1a:07:11:1f:fc:6f:6e:54:34:e9:0f:72:12:
80:ff:1a:ea:77:b7:6b:1d:35:d3:34:fd:0f:bc:29:
ba:50:35:fc:af:b1:05:50:77:93:ed:1a:79:e3:27:
0b:e3:aa:7d:96:96:10:9e:c4:ac:2b:90:7d:ec:2f:
c0:71:9e:0d:06:3b:b1:29:ee:a3:28:52:53:86:02:
ee:6f:b2:a8:4e:15:80:d4:64:3a:3b:55:94:0b:aa:
10:09:8e:0a:bd:12:a6:75:af:bb:7f:d8:e0:ba:ce:
ed:ea:7a:d8:c0:30:89:d6:e8:34:bb:19:5f:72:c9:
e5:64:9e:7a:f9:c7:4f:e4:54:47:92:21:72:a8:d7:
15:c5:35:2e:7c:ff:94:c5:59:eb:1a:2f:b5:64:69:
82:0c:01:16:fb:7a:60:4d:94:59:0b:46:ff:d3:f4:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:B6:9D:40:6C:E2:64:E9:03:54:A8:25:49:C9:22:FB:C8:68:DB
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:be:af:52:a0:9f:59:23:64:58:68:7e:df:6e:aa:6d:e2:
25:83:a5:4d:57:6b:27:9e:f2:80:db:c0:64:fa:47:35:67:08:
c2:14:0c:d5:1f:2f:bf:50:43:45:a3:2e:45:33:32:69:f5:cb:
69:a6:99:ef:c8:72:16:de:99:a7:bb:3d:e3:6a:76:52:00:00:
50:f2:1f:b9:1c:f5:9c:1a:ff:25:36:e9:83:09:e7:f1:ae:ad:
0f:bb:1b:77:fc:9f:f3:21:0c:24:8c:77:39:d3:37:54:d9:c4:
12:da:72:95:68:bb:c2:4a:2f:6e:2a:e4:f7:d4:c5:61:9c:1d:
0b:94:4b:8d:86:25:8b:3e:b3:3f:e6:b8:bf:cf:23:19:21:f6:
a8:0d:5b:fc:16:26:29:3c:31:68:cf:84:01:72:0c:33:a5:89:
6f:47:2b:d6:64:99:93:bb:21:f5:7a:ae:39:af:40:15:cf:e9:
1f:a5:5e:c5:49:a2:61:63:03:b8:27:ce:ba:9e:bb:7a:84:39:
fb:69:90:15:d8:39:5b:b1:fa:d3:34:7f:ae:fb:36:1c:b0:46:
40:01:c2:a0:d9:d1:67:bd:8c:69:9c:3d:e4:e8:70:a4:04:f0:
e5:46:55:c6:2b:79:07:4b:31:44:40:6a:40:9a:ca:b8:1e:36:
db:6b:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:17 2025 by rpki-client