Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File: uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier: jRO5Y8A2mnrfZIddWmm9EUXoPcHVAmHkCjDH6iFOhLw=
Subject key identifier: 34:29:E8:2D:7F:A9:19:36:16:19:DC:22:0B:55:EB:09:07:92:19:5F
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 01984852B1D924AA7EBF15CC1C51816DF9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number: 0D33
Signing time: Sat 26 Jul 2025 20:00:35 +0000
Manifest this update: Sat 26 Jul 2025 20:00:35 +0000
Manifest next update: Sun 27 Jul 2025 20:00:35 +0000
Files and hashes: 1: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
2: Wyw6f7z9XFhQdDF9UwLgPYFT6_Q.roa (hash: 1RzZ4RihPLYHjPztE9UylSZaMNlezfJjIV9fNaanWRg=)
3: X9RNdUxkmLFNiFpUP9LHqq5hH5Q.roa (hash: sO05RjG57ukJeOdbo7TbIC4ef+lfKmg1XE7a20jQ0B4=)
4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: WyrM4qwNDMOif3kDmeIS8qTmHxrgHtZn8IAUV3VsDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:b1:d9:24:aa:7e:bf:15:cc:1c:51:81:6d:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jul 26 20:00:35 2025 GMT
Not After : Jul 27 20:00:35 2025 GMT
Subject: CN=3429e82d7fa919361619dc220b55eb090792195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:61:0a:2c:9b:b3:9b:c9:5d:d4:19:43:68:
de:fe:9b:0f:ac:ee:36:31:28:5c:0f:27:21:84:45:
1f:95:f7:d9:06:aa:19:e1:92:d7:c6:e8:98:3e:e5:
a7:c8:e7:a5:c4:ad:42:e5:6f:f1:85:71:a0:63:8d:
e6:b3:26:f6:04:af:0d:72:d1:b3:ef:de:5d:9f:03:
cb:38:b1:4a:62:cd:0c:76:89:bf:22:2a:ed:d0:05:
31:3d:a2:a7:65:2d:6e:4f:2d:a4:71:bf:09:44:86:
cd:fa:ee:e9:ce:8d:08:ca:68:c9:35:cd:6d:05:8e:
95:5c:07:22:8f:b5:88:f1:19:35:b8:19:b4:76:c7:
b3:7e:15:5c:20:f4:8f:9a:08:7a:b0:80:1c:b0:54:
65:7e:31:43:7d:54:06:64:de:50:ec:a1:d6:92:37:
e6:23:a1:0c:da:de:49:69:c8:18:21:ef:ac:11:8f:
8d:e2:d5:7a:ac:58:08:06:dd:03:16:a7:c1:87:ff:
1f:94:5c:fe:ee:a0:91:de:dc:f9:09:1c:3d:bf:0f:
01:63:66:c3:48:f0:fe:d1:f6:dc:d3:bf:18:5b:f0:
22:cc:08:b8:7f:1b:31:1a:57:60:59:ed:94:30:1d:
20:72:bc:70:90:78:bf:b1:3d:90:c4:e7:30:4d:e3:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:E8:2D:7F:A9:19:36:16:19:DC:22:0B:55:EB:09:07:92:19:5F
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:ff:8a:ee:88:54:90:f5:cd:6c:88:97:86:a3:c2:8a:f8:
01:aa:82:30:87:06:94:c2:66:3a:d4:52:ca:74:98:8f:d9:be:
12:bc:97:87:76:a9:b3:3a:cc:7a:73:41:1a:4d:7a:2e:86:77:
0a:e1:38:88:83:92:b0:30:d6:fb:4e:3a:f7:f5:a5:fb:0c:06:
d5:99:93:6a:98:8f:18:fb:92:f1:d7:2c:d1:74:0e:12:49:3a:
cf:0e:71:eb:8a:37:35:6d:30:0e:56:d5:37:c3:6a:d0:0a:c4:
f1:ee:d8:e6:b4:52:03:bb:3b:1e:66:6b:bc:ef:54:33:cc:b7:
b8:bd:aa:7e:3e:9e:39:60:f7:01:f2:a5:2d:56:d7:7d:f6:17:
c4:fa:39:bd:fe:37:02:cd:23:29:42:94:49:f8:54:4b:96:f1:
c6:b0:2d:bb:b5:2e:71:99:ed:f7:f0:22:06:48:f0:6c:e7:c5:
fe:f6:a9:f5:02:93:b7:d2:00:71:6a:23:31:00:84:b0:d0:2f:
43:f6:7c:1c:92:2a:4e:29:66:ab:cc:62:8e:15:7c:1f:f7:3d:
d1:f3:d7:23:59:a8:e1:b7:8b:a3:52:59:85:31:39:5b:78:94:
a1:1b:6f:4c:c6:bc:d7:16:03:e9:d6:c5:ed:ae:6c:a0:b2:94:
dc:bb:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:16 2025 by rpki-client