Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier: hw2ZOJoQ6PFsdl8P5fNSSO8pem7wf6ckQh+FYCziueQ=
Subject key identifier: 90:EE:09:39:5F:08:01:4C:13:EB:B3:B3:B5:3F:F9:0C:F8:FC:A5:99
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial: 019851FA40A434576BB4020105A94FA4626F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number: 070D
Signing time: Mon 28 Jul 2025 17:00:11 +0000
Manifest this update: Mon 28 Jul 2025 17:00:11 +0000
Manifest next update: Tue 29 Jul 2025 17:00:11 +0000
Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=)
2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: JpT2K4aNaZYn3zT2wKtCZfm6ZmeEO2/i3h6yCd/h+y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:40:a4:34:57:6b:b4:02:01:05:a9:4f:a4:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Validity
Not Before: Jul 28 17:00:11 2025 GMT
Not After : Jul 29 17:00:11 2025 GMT
Subject: CN=90ee09395f08014c13ebb3b3b53ff90cf8fca599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:57:9b:b8:10:a4:f3:6d:0c:fa:c7:5f:3c:
5c:e7:1c:4c:b7:2d:77:99:a5:47:18:5a:7d:5f:a9:
77:87:4b:69:9f:b1:81:2d:2a:e1:15:b5:88:4a:6a:
d0:25:29:0c:d9:d0:7c:5b:8b:71:cd:09:bc:e5:30:
2b:9f:5a:d3:0c:26:dd:ec:46:b9:8a:92:f9:7d:44:
56:73:4f:18:41:83:6d:ed:df:a3:7a:95:5e:c9:18:
a0:48:b6:42:53:00:a6:81:61:78:7a:94:86:fa:0a:
45:61:0a:f2:76:8a:32:e3:52:e2:17:00:3d:2e:92:
e5:34:29:59:9e:ec:b9:e3:cd:89:80:d8:26:cf:c6:
b2:88:70:fe:cf:0a:c1:74:b4:17:30:79:3a:9d:76:
eb:c0:af:36:11:d3:bb:83:e1:56:33:03:c9:80:e1:
3f:ac:53:57:e6:a2:42:cc:0b:fb:25:55:b3:87:60:
4b:2c:cb:37:12:55:21:00:84:9c:13:7e:a0:cc:4a:
17:8e:26:d6:f7:3d:04:97:93:57:21:5e:1d:43:9b:
a7:b0:2a:0a:6f:12:34:8b:7b:09:03:b1:be:6a:b9:
3c:07:f5:ba:4d:5d:88:c0:f0:54:6e:23:19:aa:b4:
08:4c:71:e4:81:57:3f:c8:6b:4e:41:90:a6:46:4c:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EE:09:39:5F:08:01:4C:13:EB:B3:B3:B5:3F:F9:0C:F8:FC:A5:99
X509v3 Authority Key Identifier:
keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:29:fa:0f:cf:4d:e3:86:4f:73:6d:c9:19:30:18:fe:25:6e:
a5:8d:87:8e:c6:ce:4d:55:ea:03:3c:66:32:a7:8d:9b:d1:8b:
7f:f2:11:d8:b4:25:cd:9e:cf:3a:cd:e9:76:ec:ad:a9:1f:88:
1f:77:26:b5:f5:c6:ae:f2:03:19:67:53:7e:03:aa:94:01:2a:
2b:57:e1:88:15:73:cd:18:92:96:27:ec:57:ae:dd:7e:da:f4:
1a:49:e8:17:b7:8e:3c:b1:b7:54:03:b5:b2:f2:d3:f1:46:75:
1c:61:b0:6f:91:b2:df:97:3a:70:c3:86:a2:78:ce:26:69:93:
e3:15:7f:e2:3f:a7:f1:21:46:95:3b:8d:4b:29:ac:38:d3:62:
c9:f3:fb:13:15:26:97:30:b7:9b:e9:da:ba:8b:8a:41:79:5d:
7e:f9:4e:d5:ea:f4:ff:dc:32:e2:f8:8d:37:19:45:da:d9:ae:
ad:a1:8e:d8:a6:44:91:2c:82:af:80:6c:18:20:cf:66:7d:54:
50:44:c2:01:4b:cf:37:2e:14:87:84:18:22:f5:5c:b6:41:31:
2e:3a:8e:bf:ae:e4:6b:bc:32:4a:81:d5:d8:00:83:5d:7e:53:
e7:3d:9f:03:cc:e6:30:9c:d2:6e:83:44:3a:4c:68:c7:59:a6:
27:e5:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:55:33 2025 by rpki-client