Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: 6meoJ5QbZ/JPeG/lcnIo8USVVkST9AyesnMmJFebIow=
Subject key identifier: 9E:87:78:51:66:AC:F8:6B:CA:62:2F:74:DC:67:66:FF:FC:C7:93:63
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 01985155DB2456FC9F0CFC2742AEED26E68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 065C
Signing time: Mon 28 Jul 2025 14:00:37 +0000
Manifest this update: Mon 28 Jul 2025 14:00:37 +0000
Manifest next update: Tue 29 Jul 2025 14:00:37 +0000
Files and hashes: 1: R3B7cvcZfT1UgiKlMGRmSCqelSI.roa (hash: hK53ZwTRULQ2RrBmMhyQ9z9h0bWz1bk+KzcfZK6F3vk=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: pJ7y73LuaFG+KHpVQAxicbAWCA3aKvyswc6IImEjHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:db:24:56:fc:9f:0c:fc:27:42:ae:ed:26:e6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Jul 28 14:00:37 2025 GMT
Not After : Jul 29 14:00:37 2025 GMT
Subject: CN=9e87785166acf86bca622f74dc6766fffcc79363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:2b:7a:0f:62:b8:ae:56:93:91:f8:4a:81:
a9:0d:5a:0b:4f:b5:86:55:a0:59:27:54:40:86:b9:
ea:5a:29:c5:e1:e5:a1:16:0c:c3:80:fe:0b:39:e7:
62:56:b3:c4:3a:d4:42:43:23:46:59:6a:7f:eb:64:
13:96:2f:a2:59:cc:c2:9c:44:1b:e6:67:47:4f:0b:
f0:93:57:f7:a9:14:3f:41:73:f9:00:72:fc:60:56:
41:1c:76:6f:23:29:d0:17:fa:72:fc:5d:f9:8b:ca:
97:05:69:9f:f6:1a:ac:11:d3:1b:e6:c4:71:81:4b:
cc:c8:e1:51:f2:d1:88:2b:0a:50:a2:e5:8a:b9:b8:
54:49:4e:e0:e4:78:80:26:dd:cd:b5:2e:c7:6e:d6:
02:3a:4f:3c:6a:af:89:d9:05:6c:3d:a4:66:df:11:
a1:b9:1b:cc:d6:4b:6a:b6:95:37:d9:b7:aa:e9:bc:
77:f6:13:b4:75:b0:8a:db:b2:8c:1e:c9:c1:d8:df:
77:ed:7c:a3:f7:31:4e:1d:15:8d:39:ad:58:ee:19:
23:79:64:30:47:d9:74:b9:11:0a:50:36:63:a9:4e:
3a:c3:a5:9a:5c:cf:1c:f5:e0:0a:f6:f1:ff:a6:9e:
08:79:13:46:ae:90:c7:4a:87:4d:84:8b:48:3c:5f:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:78:51:66:AC:F8:6B:CA:62:2F:74:DC:67:66:FF:FC:C7:93:63
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:27:bc:e9:92:d0:73:a1:58:bc:c2:82:e0:94:5c:40:2c:
42:20:c7:90:8b:4d:b7:ce:c3:0a:b7:cc:07:e7:7f:6b:e9:ab:
e4:e1:39:5a:a7:1f:d2:a3:18:77:91:71:71:49:f9:0f:e7:02:
44:8e:f1:d8:77:08:38:74:32:c1:bf:b1:f9:e3:35:dd:a7:4e:
56:31:5c:f3:97:dc:6c:7c:d1:00:3f:16:3d:70:bd:17:bf:b9:
44:21:28:38:7f:30:3c:43:0a:ce:b0:8e:bd:2b:88:b0:cf:68:
f6:07:00:64:77:92:5d:4a:15:92:6a:65:95:10:a8:8d:2f:52:
c8:1b:cd:63:74:17:d1:9a:f0:f7:4d:c5:68:ee:13:3f:98:6d:
cc:5a:d6:a6:01:85:59:f9:ac:34:3e:0a:5a:df:6f:b7:fe:cd:
7c:b2:a2:bd:98:9e:ed:69:8f:2f:a1:3e:96:c0:37:79:1c:54:
95:7f:b1:6d:f5:08:8d:7d:8f:b2:9e:fa:d2:bc:f5:ee:0a:e9:
10:c2:13:4f:b8:c1:01:06:14:ca:41:7f:d0:1d:83:fb:a7:d2:
d2:eb:e5:7b:8f:43:36:59:14:8d:75:75:82:01:66:6b:15:3b:
f6:ea:1c:4d:b3:f4:93:b7:17:ae:68:d0:de:9c:0b:27:18:8a:
69:5c:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:20:35 2025 by rpki-client