Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: Y9a5lu/WA02iffhGr+tcGx/BSIgEac8jsg/SLAUqIy8=
Subject key identifier: A1:6E:EC:EC:EB:D3:63:4D:DE:F9:49:F0:9A:2D:19:65:15:A6:6F:31
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 01984777F9AD27D52AD0EB4B1F8D42738C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:01:41 +0000
Manifest this update: Sat 26 Jul 2025 16:01:41 +0000
Manifest next update: Sun 27 Jul 2025 16:01:41 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: C1RZqgAOcdiRXofSb4Mxhmmnp0VDRmdJm5a3LvzkQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f9:ad:27:d5:2a:d0:eb:4b:1f:8d:42:73:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jul 26 16:01:41 2025 GMT
Not After : Jul 27 16:01:41 2025 GMT
Subject: CN=a16eececebd3634ddef949f09a2d196515a66f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:14:ed:7c:9e:90:60:da:14:9d:37:11:72:
34:f5:44:86:50:f3:96:04:aa:70:d4:ed:e1:9b:99:
2d:87:01:75:40:81:70:7c:0f:0a:01:11:24:4d:84:
7d:cf:a0:56:b3:a9:b1:f4:a8:a4:a3:3e:19:2a:3b:
3f:04:d5:19:95:f6:77:ca:be:71:7b:1d:72:eb:c2:
25:37:59:2e:93:a9:f5:74:ac:40:a5:c1:36:92:b3:
58:26:65:84:f7:bb:63:04:21:bd:80:80:6e:a9:b5:
54:56:24:4d:2d:bd:f1:f8:44:21:2c:de:2a:db:15:
e3:10:79:12:6a:dd:35:6a:50:09:47:e2:eb:03:eb:
e5:aa:b5:27:56:84:f3:f2:f2:93:09:56:18:95:65:
12:fd:4d:0a:88:10:2e:36:1c:fb:bb:29:15:7f:77:
0b:34:94:3a:79:49:fd:69:2a:3b:26:3b:8c:f3:8e:
47:21:d0:ae:74:61:41:4c:70:97:02:be:11:c0:b8:
ab:f5:62:10:c1:1f:77:13:c3:3a:7e:b3:78:27:af:
3d:2b:77:0b:9f:6c:b5:2c:2c:f0:68:77:02:52:4f:
19:44:51:41:9f:9a:03:49:e0:12:bf:30:95:9a:67:
34:27:3e:f3:9f:a5:70:14:e4:f2:de:d2:a6:fe:5e:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:EC:EC:EB:D3:63:4D:DE:F9:49:F0:9A:2D:19:65:15:A6:6F:31
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:eb:5a:74:bf:e0:b7:e8:d2:0b:95:37:ff:ab:37:e4:78:
7e:6b:da:a0:d9:f7:fd:18:45:46:71:21:ca:48:62:44:15:b1:
74:6a:6a:04:cd:71:e5:88:28:fc:7d:ca:7d:83:bb:8d:16:00:
59:e6:da:38:93:18:fe:9c:0a:4e:88:42:ac:88:3e:94:22:dd:
5e:58:68:be:99:4a:18:b3:d1:79:12:76:e4:55:5c:ca:1f:5e:
a0:58:a3:b3:72:1f:28:de:6c:a8:fd:4e:57:f3:e8:4f:5b:9c:
38:a0:8f:12:67:9f:5f:b0:86:8a:db:ca:13:ca:ac:e4:94:78:
75:cf:c8:0e:c7:cb:34:bc:72:8f:fe:ea:7c:d5:56:76:81:13:
25:3d:d1:24:6e:0f:6d:09:80:d0:3a:8b:4c:76:00:5d:8e:cb:
14:b8:76:9a:8b:ad:81:64:17:0c:44:e8:22:a4:28:65:58:93:
0c:15:43:36:e3:a0:45:8c:9c:4f:45:51:38:45:cc:63:32:91:
df:7a:41:1d:11:2b:ae:99:39:ae:e6:94:82:60:8f:f6:15:fc:
77:64:dd:61:e4:86:e6:5b:19:3f:e8:32:39:49:1c:26:4c:88:
78:99:0e:97:2e:5b:2f:26:10:b7:dc:9b:f5:64:e6:7f:e0:d2:
7d:a8:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:11:40 2025 by rpki-client