Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: I7nRZ4TjPE24BSbxx+pNo9rDmC9FvxXWnvUokjreoBk=
Subject key identifier: 21:51:E5:CC:D0:B3:E9:54:F2:70:0C:06:0F:32:C3:AC:73:A8:5D:D1
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 019838045DF3338CD724FEBA8DD8734A94C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1319
Signing time: Wed 23 Jul 2025 16:01:06 +0000
Manifest this update: Wed 23 Jul 2025 16:01:06 +0000
Manifest next update: Thu 24 Jul 2025 16:01:06 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: +qnr28q2vnm7IweS/UP65wcqfRKvHreL4RMCoPhYB0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:5d:f3:33:8c:d7:24:fe:ba:8d:d8:73:4a:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Jul 23 16:01:06 2025 GMT
Not After : Jul 24 16:01:06 2025 GMT
Subject: CN=2151e5ccd0b3e954f2700c060f32c3ac73a85dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:ca:9e:2a:3b:b7:8d:f2:f2:e6:19:3b:6f:
08:47:f4:e5:40:77:f3:82:bc:ac:6c:c1:c3:44:e2:
0c:1c:86:c8:54:32:d4:35:2d:21:c7:54:13:ca:66:
50:e3:8a:0b:7c:ab:2c:e8:6c:af:78:3e:7d:6c:cc:
3e:bc:16:fc:f5:46:a9:4e:c9:8a:d6:fd:e1:5f:6b:
0d:4c:d2:b2:7a:20:5a:7d:c3:86:a5:8f:41:1a:07:
6d:04:6c:5a:94:a7:10:57:af:e7:77:ec:89:cf:27:
2e:82:d5:a3:03:11:90:a9:bf:5f:7d:3f:e4:58:e0:
9a:3a:17:7f:cd:1e:75:38:57:d8:14:0e:cb:2d:79:
33:a0:0e:7b:e9:68:85:6e:39:ce:14:1b:ac:82:3f:
cc:ee:e1:23:00:ad:13:4e:99:2b:f0:d5:19:34:6c:
d6:2f:97:67:77:62:14:45:25:ff:d7:e0:1f:c2:89:
5c:29:11:66:3f:fd:31:08:1a:00:18:e3:8f:c6:25:
0e:ae:0c:71:cb:13:2b:5a:52:aa:e8:9e:5d:41:b6:
34:5e:a0:f6:45:d4:56:ad:56:55:00:55:a2:3a:28:
c1:d2:b8:2b:64:b0:8a:21:64:59:24:c3:ca:c7:12:
78:45:3e:46:5c:61:71:bf:50:e7:24:f7:8d:82:ea:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:E5:CC:D0:B3:E9:54:F2:70:0C:06:0F:32:C3:AC:73:A8:5D:D1
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:60:96:05:9a:6c:ae:b5:80:bd:0f:ff:68:6f:2c:19:7d:
6f:18:80:34:46:03:ef:15:93:17:9c:5c:c8:23:f1:c6:33:80:
c7:a1:0b:5d:b1:57:4d:87:37:df:12:10:7d:67:c4:6c:16:96:
26:0f:c0:f2:39:d3:9d:5a:37:e9:f3:d7:1f:d1:cb:43:c1:9b:
28:01:db:19:e8:1f:a5:9a:5e:6f:fc:3d:a0:41:1f:24:b8:e1:
bb:8c:be:48:90:ac:ae:2e:c9:b4:f1:60:a3:76:68:7c:68:d6:
83:95:d1:03:b7:8a:e3:94:40:50:36:9e:d1:0c:f3:95:a9:2b:
66:45:91:b4:bc:b8:3d:a2:e6:24:b8:9a:b9:a7:9c:11:33:b4:
9e:83:c8:a6:5b:71:73:55:e1:41:33:87:66:cc:48:73:ad:a1:
b9:2d:ec:30:db:a4:59:da:e5:7c:e5:cb:30:ab:c2:65:ae:1f:
d8:e6:44:b9:0d:76:4f:75:9a:7c:40:09:20:20:33:76:7f:b3:
ba:89:96:d3:32:77:8c:a5:fe:bb:06:0b:c3:04:e4:17:c7:1d:
ba:47:61:82:4d:06:6a:ff:13:79:8b:b3:31:19:7d:98:6c:12:
18:2b:cd:28:5e:18:b6:f3:c2:15:e5:06:49:fc:6f:7c:96:09:
4b:70:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:52 2025 by rpki-client