Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: bYSwaMIfSbUaxtykwL7oS9ABA41bd1sb23y/QbaqdBY=
Subject key identifier: 4C:0A:E7:97:40:A9:81:8F:91:40:9D:D1:CE:BA:57:00:D2:B4:A3:02
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 019849D320796BADE8A3C533048F4057A0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 11BC
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: GQQHpsKBfxsNEjICM6b5p3PeL88ADCJ8lZGMRvsaF2M=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:20:79:6b:ad:e8:a3:c5:33:04:8f:40:57:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=4c0ae79740a9818f91409dd1ceba5700d2b4a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:fd:fb:ae:6d:28:5b:6e:08:fd:07:09:2a:
8d:3a:9e:49:60:c3:ec:d6:71:56:c7:26:2c:ef:d7:
89:34:56:0f:d0:65:47:bc:95:d9:f4:ab:bc:ef:54:
05:d7:f2:66:33:8b:d2:39:49:32:8e:00:4c:26:8d:
5f:47:8a:24:10:4d:bd:15:00:74:0c:3d:c3:ba:a3:
5a:43:06:2c:93:31:8c:d2:d9:42:5a:ef:a5:e8:a4:
2b:31:ce:c4:a6:8d:7f:c4:36:0c:49:bb:ca:37:6c:
9f:2b:a2:0b:86:3e:5e:fc:8c:0c:aa:99:30:24:6a:
8a:db:27:b6:18:61:94:df:1b:97:06:ad:7e:ad:42:
2d:15:6b:fd:85:b2:ac:cc:d4:50:da:c3:ea:ef:8e:
cc:14:d3:8d:e8:9d:60:5b:c3:3f:b8:78:82:31:86:
ba:99:f6:51:33:ab:fa:01:e2:f7:ac:1d:9f:22:0f:
8f:9f:3e:fd:26:4d:37:4d:8d:66:69:89:05:de:a5:
6d:8e:93:af:02:70:8a:54:79:50:8a:ff:19:b3:11:
d1:ac:dd:dc:b2:6e:26:0d:f3:01:f4:4e:a1:c2:e8:
10:37:32:39:f9:d0:58:d1:c7:55:84:0f:d6:77:c9:
d9:d3:cb:c6:88:01:90:83:25:cd:5a:0a:3e:cb:56:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:E7:97:40:A9:81:8F:91:40:9D:D1:CE:BA:57:00:D2:B4:A3:02
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:0a:36:87:90:56:42:ad:0a:bb:ef:c1:06:41:f5:11:a5:
43:ae:58:56:f9:98:86:4b:3c:ca:c8:48:b8:32:23:44:b3:52:
1c:74:24:c9:3d:1c:25:51:8d:c6:9d:36:48:2e:3b:b1:ff:6d:
3b:5e:23:dc:a9:ba:f2:b8:7a:f2:0f:a1:a8:f7:13:c4:22:89:
80:c4:b8:aa:9f:08:d8:c3:da:32:48:a6:ed:e7:ce:c9:ac:70:
79:04:db:4c:40:99:b2:00:a8:21:51:c5:35:e7:06:40:2f:06:
0d:4d:60:19:17:91:b1:a6:cc:e5:fc:90:9b:e0:83:6c:01:1e:
e9:f2:b4:15:60:d7:74:c5:c5:fa:46:db:19:60:36:e1:13:68:
2c:90:6c:df:2e:58:b9:6c:90:53:d6:3a:c5:fb:8c:d4:27:e2:
37:b2:4e:67:82:83:4c:7f:1f:a3:3c:94:f5:f7:41:3c:a1:cb:
4e:62:66:7f:a9:60:4b:54:d1:74:ce:bf:54:51:e8:46:c2:0c:
a2:09:14:4f:e4:e0:13:69:24:d1:c1:46:78:51:5f:cd:41:0f:
86:ef:27:37:4a:b1:50:ab:3d:2a:78:12:a2:5e:aa:55:a8:17:
04:0a:b6:34:ff:45:d4:4a:bb:3c:48:1f:05:5d:54:9f:2f:31:
10:62:50:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0yB5a63oo8UzBI9AV6D7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj
NGRkNGIwHhcNMjUwNzI3MDMwMDI5WhcNMjUwNzI4MDMwMDI5WjAzMTEwLwYDVQQD
Eyg0YzBhZTc5NzQwYTk4MThmOTE0MDlkZDFjZWJhNTcwMGQyYjRhMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjH9+65tKFtuCP0HCSqNOp5JYMPs
1nFWxyYs79eJNFYP0GVHvJXZ9Ku871QF1/JmM4vSOUkyjgBMJo1fR4okEE29FQB0
DD3DuqNaQwYskzGM0tlCWu+l6KQrMc7Epo1/xDYMSbvKN2yfK6ILhj5e/IwMqpkw
JGqK2ye2GGGU3xuXBq1+rUItFWv9hbKszNRQ2sPq747MFNON6J1gW8M/uHiCMYa6
mfZRM6v6AeL3rB2fIg+Pnz79Jk03TY1maYkF3qVtjpOvAnCKVHlQiv8ZsxHRrN3c
sm4mDfMB9E6hwugQNzI5+dBY0cdVhA/Wd8nZ08vGiAGQgyXNWgo+y1ZvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwK55dAqYGPkUCd0c66VwDStKMCMB8GA1UdIwQY
MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt
ZWVkMWQwOTY3MDc4LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4
LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtEKNoeQ
VkKtCrvvwQZB9RGlQ65YVvmYhks8yshIuDIjRLNSHHQkyT0cJVGNxp02SC47sf9t
O14j3Km68rh68g+hqPcTxCKJgMS4qp8I2MPaMkim7efOyaxweQTbTECZsgCoIVHF
NecGQC8GDU1gGReRsabM5fyQm+CDbAEe6fK0FWDXdMXF+kbbGWA24RNoLJBs3y5Y
uWyQU9Y6xfuM1CfiN7JOZ4KDTH8fozyU9fdBPKHLTmJmf6lgS1TRdM6/VFHoRsIM
ogkUT+TgE2kk0cFGeFFfzUEPhu8nN0qxUKs9KngSol6qVagXBAq2NP9F1Eq7PEgf
BV1Uny8xEGJQIg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:33 2025 by rpki-client