Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
File: uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft (raw, json)
Hash identifier: CdotY05xShrTHemXwvwzkVlMBg5oQ7D77SwgLqjpuno=
Subject key identifier: DE:B9:A6:44:CA:C6:E1:FD:DA:1E:49:41:B4:BB:99:4C:CF:9B:82:8F
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 01984AE5725AB9FD667F07B0B1822E2E5C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
Manifest number: 0F6F
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (hash: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=)
2: uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl (hash: ZCjMfqEOmJ+jJ/9plvPpye48Pc/rDuktpynXTqprgho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:72:5a:b9:fd:66:7f:07:b0:b1:82:2e:2e:5c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=deb9a644cac6e1fdda1e4941b4bb994ccf9b828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:b3:ca:e0:14:c3:06:3b:62:9b:e3:a1:32:
ef:98:a3:df:15:1b:a3:44:2f:9c:90:3e:ce:fe:c4:
56:65:40:74:f4:0c:5e:f7:ef:2c:c0:38:56:c0:81:
01:5a:d7:de:21:dd:7e:db:3b:68:cd:b8:f5:5e:93:
35:11:c2:6a:97:14:91:0e:05:76:88:3f:a1:8f:05:
03:3e:37:a4:d3:f3:a8:60:3c:85:26:52:03:09:85:
52:e3:c2:f7:65:01:7c:6f:15:1b:2b:99:14:31:c1:
cb:86:ca:98:2a:9a:9c:1e:a0:c4:b0:97:82:4d:e1:
2d:5a:b5:84:fa:fd:ad:47:5f:c5:e1:79:0d:56:32:
52:b3:40:4e:bc:d2:89:8c:b0:cd:75:85:2c:17:61:
b2:1d:3f:86:a3:1c:13:44:a3:4d:78:7f:30:de:13:
d1:bd:03:c9:2f:4d:5f:cb:ae:cf:c2:57:bb:95:69:
dc:4e:6b:8d:4a:ec:af:f6:a7:ef:de:41:65:cf:51:
d2:bc:34:fa:bf:d8:6e:d1:02:ad:22:ba:5f:c1:e3:
3c:8a:d6:1a:9f:28:cf:62:09:5d:c2:11:ff:cf:ae:
f9:4a:f9:db:49:e2:a7:14:a0:0b:86:36:ea:a3:21:
f7:d2:3c:b3:91:08:93:57:ed:00:b5:d1:4f:60:6a:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:A6:44:CA:C6:E1:FD:DA:1E:49:41:B4:BB:99:4C:CF:9B:82:8F
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:76:75:71:fc:1c:7f:5c:dc:7a:87:f8:db:57:ef:8d:3e:57:
e5:46:d5:60:3f:f2:4b:6e:8b:3a:05:74:2c:9b:e2:82:af:1c:
78:6f:62:51:a1:64:ab:39:3b:45:34:3a:41:6d:6d:cd:fe:6e:
f1:7f:2a:72:37:95:25:25:3e:7f:9e:91:fd:14:a1:95:30:f8:
49:d6:c6:f0:70:4e:3d:d0:e5:1a:53:fa:71:60:e2:ef:d0:56:
33:ee:fe:28:ee:66:e9:18:4d:94:df:bf:59:8f:1d:b1:43:76:
b4:e8:4c:6d:ad:94:7d:1d:ba:ae:30:e3:3e:49:24:86:cd:47:
ca:78:a5:6d:ce:97:0d:0b:be:91:ff:0b:17:81:d9:5f:10:cc:
a8:f5:c8:cf:d3:18:7b:e0:42:fa:85:a5:50:89:48:49:ed:b2:
b0:bd:01:40:05:56:db:67:a5:22:7e:de:31:e0:b5:17:d0:b5:
e0:bf:43:af:c0:36:05:05:32:7e:5e:47:61:ab:fc:ec:0d:5f:
5c:46:55:72:f4:1a:d3:99:6e:1a:e2:a3:c8:4c:f8:28:26:f8:
f8:6b:dd:60:e9:26:81:04:78:a5:83:72:48:e2:6e:df:0b:11:
cd:3f:90:de:4b:2d:c7:ea:4e:c2:f3:e9:05:42:35:a0:ed:4f:
f1:c1:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:12 2025 by rpki-client