Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: +Nxjx6IHwWQo+YcOKbi3tWgigUnnFKn52Km0jvHqAVk=
Subject key identifier: B0:54:5F:50:3D:B5:86:CC:4C:AF:99:EB:31:09:0A:D7:67:EE:CC:FE
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01984B538D382756B87FCEF11CB4EBEA9879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0E0D
Signing time: Sun 27 Jul 2025 10:00:23 +0000
Manifest this update: Sun 27 Jul 2025 10:00:23 +0000
Manifest next update: Mon 28 Jul 2025 10:00:23 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: O8BsV+W0ob2okRFzfM/GSUh3Hzifn1tnBRq9dVXJ5nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8d:38:27:56:b8:7f:ce:f1:1c:b4:eb:ea:98:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jul 27 10:00:23 2025 GMT
Not After : Jul 28 10:00:23 2025 GMT
Subject: CN=b0545f503db586cc4caf99eb31090ad767eeccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:97:cf:cb:90:c7:6a:3e:5b:0f:17:11:02:
a7:e3:80:a6:3f:4a:83:1a:68:75:af:48:8f:e4:36:
d7:d4:97:33:67:41:b5:3b:91:52:f4:53:e4:11:b7:
36:d9:25:d1:d9:52:2d:72:75:db:92:3c:5e:5f:8a:
b0:4d:63:80:a6:ad:f1:16:9b:2e:a6:e4:18:94:0c:
c6:cf:1e:fd:c2:bd:e3:db:d6:47:c7:fd:db:42:8b:
c5:84:c3:a2:93:5b:80:af:19:e6:d1:19:79:71:ab:
22:52:b6:a7:18:e1:58:97:51:11:c5:17:ff:26:68:
e3:30:53:e4:0b:5a:b3:8e:e4:c0:d7:25:56:a3:7a:
bc:69:ed:fa:cc:f1:d2:84:00:2c:bd:26:ee:02:4b:
72:d9:71:10:ef:02:7b:0b:a7:97:80:90:96:cc:83:
1e:ee:96:f7:24:6d:ef:e4:76:72:37:09:02:55:7a:
26:25:0d:c6:13:0e:e0:6b:fa:c0:38:13:45:62:e8:
f9:8a:b4:88:ee:a6:27:7f:2e:2e:46:5c:7a:f8:87:
5c:33:e9:92:4a:8b:2e:39:d9:2c:51:a1:e4:61:38:
c7:ee:97:cd:d4:7f:33:d7:3e:17:7d:82:e3:a4:24:
9b:ab:4c:f8:36:21:57:68:ee:7b:14:6c:e3:56:1d:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:5F:50:3D:B5:86:CC:4C:AF:99:EB:31:09:0A:D7:67:EE:CC:FE
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dd:a6:7c:53:9d:49:07:ff:c7:0b:3d:da:33:07:e1:9c:3b:
bd:59:d3:ea:59:54:74:b1:12:16:df:80:0c:be:6c:bc:fe:87:
6e:69:d4:48:90:5a:9d:28:48:1d:72:0a:e6:25:2d:4d:33:a2:
1a:07:05:18:b3:a0:0c:ba:41:59:ad:d6:b3:3a:4a:44:e4:8f:
a3:40:a6:5a:df:f1:12:61:69:64:ce:48:bd:50:92:4c:7b:d0:
fc:d3:32:54:13:d0:73:9a:c2:8c:61:2c:0a:37:2c:21:49:9f:
a6:03:70:f9:9b:92:ad:86:81:d0:cb:11:41:7d:42:23:37:f7:
83:74:c5:2d:08:2b:32:93:bf:98:23:c3:41:a0:64:37:37:5d:
58:c5:59:03:d5:8f:df:fb:5f:5d:5b:15:6a:43:d5:0d:70:1e:
6a:a7:2b:d9:75:fe:07:f6:38:35:e2:e4:d8:b6:45:7a:9d:0b:
d2:d5:5e:21:2c:b2:b0:fe:71:50:ef:97:e4:d9:f3:93:d6:22:
a9:b8:5a:65:81:44:3c:9b:32:3d:6f:19:9c:51:a1:d4:42:1d:
80:0d:bc:59:aa:4f:05:2a:cd:b3:1d:8d:08:0e:ca:15:f9:be:
22:f1:d7:6e:99:94:e9:e3:24:7e:28:6e:7f:b8:3b:cd:8a:e3:
4d:a4:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:43 2025 by rpki-client