Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: iGvuHJK9Cev6AbczpW7KgR47wK6avwRm750qwaOh0fE=
Subject key identifier: 2D:70:AA:58:0E:33:BD:AD:4A:59:14:FC:8E:CC:FC:33:75:44:27:13
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 019842879569884AC517C15126B31390E7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 0917
Signing time: Fri 25 Jul 2025 17:00:38 +0000
Manifest this update: Fri 25 Jul 2025 17:00:38 +0000
Manifest next update: Sat 26 Jul 2025 17:00:38 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: +kbFAncIDq5qrOW3GCRA6B/YpxkWvl5lQnGrYQTsDeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:95:69:88:4a:c5:17:c1:51:26:b3:13:90:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Jul 25 17:00:38 2025 GMT
Not After : Jul 26 17:00:38 2025 GMT
Subject: CN=2d70aa580e33bdad4a5914fc8eccfc3375442713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:c6:9a:e6:25:67:66:5e:15:06:c3:d0:42:
da:33:a1:4f:cb:23:98:23:79:31:fb:14:9b:b7:ed:
6c:be:5c:d1:84:9a:b1:59:4b:1c:5f:34:c7:f5:1f:
23:1b:da:dd:79:fd:a3:4d:d1:ac:bd:8e:07:78:dc:
a5:9d:23:b7:26:d1:c6:c4:29:ad:6a:d1:9a:33:2c:
db:57:41:ed:70:59:2b:f7:67:a3:46:9f:83:45:d1:
be:4b:d9:5b:5f:63:3a:9e:f6:de:8b:0c:0c:b7:41:
b2:4c:f1:7e:6a:ba:da:2f:0b:43:9d:2f:43:88:96:
7b:ae:d3:eb:65:38:cd:19:63:2e:6b:6a:9c:d2:c6:
71:90:f8:14:ca:96:f3:26:e6:e5:47:b6:cd:56:c2:
89:22:5f:de:87:f1:2a:ea:ab:7d:48:ef:6c:d5:df:
c6:2d:23:ed:c7:52:30:66:90:31:9b:db:31:d2:3b:
bb:e5:24:52:c7:f9:26:68:e4:32:c0:df:61:c4:0c:
17:cb:ee:6b:f4:b0:a1:b8:57:9d:88:3c:09:67:78:
8a:af:b8:3e:32:f9:73:85:0b:c1:0e:9f:08:1d:b0:
58:c6:30:39:aa:aa:10:21:8b:61:7d:4d:e5:f5:4d:
ac:1e:3b:3a:b5:49:77:c7:02:56:ff:4b:4e:1e:e8:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:AA:58:0E:33:BD:AD:4A:59:14:FC:8E:CC:FC:33:75:44:27:13
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a4:5f:f6:71:31:51:9a:5c:22:a6:4e:23:df:d6:d3:27:c6:
4c:f0:94:cb:46:2e:1e:b3:f1:71:bf:9a:f6:ac:9c:88:29:3c:
67:c6:72:92:83:37:10:f2:69:7c:28:c3:44:bd:cf:90:35:ea:
00:80:f2:ad:f2:29:61:7c:a7:4b:62:ef:60:f4:f3:b5:d2:06:
72:b6:bd:1e:a4:b0:3b:0e:d4:11:0a:79:a6:8d:04:f2:b3:65:
77:4f:5d:b3:4b:d3:f8:eb:b1:98:0e:34:fa:df:54:00:53:e7:
68:a2:89:ef:1e:f1:0a:6d:7b:ef:2d:50:c7:a4:d3:10:57:2a:
f4:32:1b:b6:52:01:6c:fc:63:14:22:16:f5:37:aa:70:1d:31:
d6:d0:cb:94:6b:66:fe:67:5f:28:22:7a:c2:42:3c:f9:10:d2:
92:09:2c:4a:a0:3a:b2:17:15:cd:89:4c:c3:2b:ea:1c:28:d3:
bd:1c:50:18:b2:26:6f:15:e0:1d:37:8d:dc:0e:12:b3:dc:dc:
a2:b3:6a:af:3e:1b:78:2f:ec:f4:19:7d:49:5d:bc:f9:f1:74:
82:c4:37:9b:cf:69:6c:5a:0b:c6:7c:49:57:89:0b:b0:bd:27:
f8:6f:e4:14:a4:c8:ea:8b:ea:e1:bc:c7:32:fe:e5:ca:fd:ff:
eb:bb:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:21 2025 by rpki-client