Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: PZqj+R8qkRmo9pwyNOGJQhpmisLfOzahK+282Dst8nU=
Subject key identifier: B0:29:43:CB:43:9D:95:EC:C3:84:6B:30:D6:7C:D4:B3:DB:A8:E3:FA
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019843D0AC802633918F2963133886B6080C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 23:00:05 +0000
Manifest this update: Fri 25 Jul 2025 23:00:05 +0000
Manifest next update: Sat 26 Jul 2025 23:00:05 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 8RpzUYT/zZl/0GAIfhwaudv0P59T/r47BdAb24zh6Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:ac:80:26:33:91:8f:29:63:13:38:86:b6:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jul 25 23:00:05 2025 GMT
Not After : Jul 26 23:00:05 2025 GMT
Subject: CN=b02943cb439d95ecc3846b30d67cd4b3dba8e3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:71:18:53:f7:4a:57:10:2a:2c:4f:01:32:
2e:6b:de:be:a7:fd:12:f8:0f:e2:04:08:63:08:de:
0c:04:a6:21:b2:6a:c3:52:08:a9:85:4b:70:f2:40:
2f:75:27:ec:1f:e6:fc:08:76:c5:f4:9f:28:ed:98:
8c:5c:a8:6d:be:57:45:34:2b:54:bb:df:8b:61:2b:
d4:34:2f:79:01:0c:ad:17:f1:37:ea:4e:91:fe:27:
82:b8:f9:93:2a:bf:d8:40:26:32:09:1d:a0:9e:43:
93:4e:75:6a:d6:fe:9d:af:06:8d:55:86:f3:48:a9:
b9:1d:2d:a1:91:d4:88:b6:82:80:c0:8c:39:22:37:
ba:00:3b:9c:c9:1d:b9:a4:80:9d:7c:62:74:2d:d0:
cb:34:85:2e:fb:84:a7:d1:ff:ab:8e:f5:86:0a:e1:
f9:04:b1:cc:c2:0d:2f:e0:62:84:a5:cd:39:13:43:
87:cb:09:0f:b7:22:55:df:bf:2c:80:f6:4e:6b:76:
4e:54:7d:f8:17:c2:18:c3:12:f9:63:29:08:c5:9c:
de:f8:04:5f:0e:0a:85:82:37:f6:4e:8d:f5:6a:1e:
12:03:e4:83:b8:1a:57:14:e8:bd:c6:62:a0:03:cb:
5f:84:79:1b:a7:2b:d2:55:f1:94:a2:0c:2e:cc:a0:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:43:CB:43:9D:95:EC:C3:84:6B:30:D6:7C:D4:B3:DB:A8:E3:FA
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:da:14:c8:68:86:03:ed:f0:e7:57:84:f7:98:64:8f:9b:
3e:8d:68:43:7d:d2:ed:c1:ff:ef:f0:aa:87:9d:5b:e6:5e:50:
d3:d0:de:43:3d:b9:16:70:95:a4:3d:6a:12:9d:43:2b:94:b3:
9f:1c:ca:ff:f1:74:ac:8f:dc:3f:5f:10:3d:9f:fd:84:df:98:
a5:71:79:56:fa:84:bf:27:9a:63:85:30:84:cc:af:18:db:0f:
c8:a7:4f:c6:35:7b:37:18:4c:c7:f9:86:df:6a:2b:34:55:d2:
ee:9b:87:e4:4e:b5:61:63:ed:4e:ae:e5:84:1e:64:4a:55:84:
23:a0:36:cc:c9:2d:9c:ba:53:86:c4:3d:ed:78:0e:63:10:09:
16:77:9a:c9:1b:8c:71:0e:99:41:13:91:24:1d:ac:8f:30:bd:
47:c5:a6:94:4e:1e:f5:02:5b:14:90:eb:11:ab:9c:16:e2:91:
56:c6:65:e1:c0:29:9f:94:54:e0:40:d1:0c:70:9d:26:ae:bd:
2e:f1:d9:39:25:31:a4:30:1e:35:c4:94:ad:fc:c7:13:c7:72:
ae:3d:65:10:d3:f6:2f:75:04:94:b2:3e:dc:c6:aa:d9:75:f5:
4d:49:1d:96:45:1f:fe:6a:7c:13:a3:33:10:b4:a3:6b:c3:0e:
69:56:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:45:25 2025 by rpki-client