
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: niMx1sSecrFJzwyAr21qy36z+j9VhUYy9BnvojwI7Xs=
Subject key identifier: FB:B4:27:EF:C3:04:EC:65:1A:17:94:FB:A3:20:7B:0F:2C:16:28:E8
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 01983495056600FE4A097ADE0BB5DE70DB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 05E9
Signing time: Wed 23 Jul 2025 00:00:38 +0000
Manifest this update: Wed 23 Jul 2025 00:00:38 +0000
Manifest next update: Thu 24 Jul 2025 00:00:38 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: l1Drz29pLWdMuqTujPRcH/FBKLnWRJ2MZxsaMCrJ+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:05:66:00:fe:4a:09:7a:de:0b:b5:de:70:db:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Jul 23 00:00:38 2025 GMT
Not After : Jul 24 00:00:38 2025 GMT
Subject: CN=fbb427efc304ec651a1794fba3207b0f2c1628e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:4a:85:3e:b1:7c:8c:87:2d:81:5c:c8:9c:
8e:e2:33:15:d6:5a:ae:6f:b9:6d:90:3c:0b:89:fd:
84:c9:49:63:08:21:a3:74:11:ae:eb:c9:8d:c7:a8:
ec:dd:e3:b5:ed:64:6c:f2:0a:72:09:70:0a:b2:2e:
5e:73:fd:b9:c1:54:3d:ed:8e:91:0c:d2:77:fd:3e:
8c:9f:c0:05:d4:89:bc:e5:8c:b0:16:42:4d:f0:1d:
e6:84:0a:44:0c:29:79:10:69:7d:6a:e0:08:d6:46:
f5:19:a4:5a:a2:bb:6b:f4:e1:01:d3:1d:43:c9:9e:
55:62:a4:9d:a9:81:5a:e0:ce:2b:9d:4e:44:78:ad:
2e:5e:3c:30:8c:d8:4a:8f:d4:5c:12:21:03:73:47:
7d:18:9e:b1:98:f0:f5:a1:a9:4e:94:0d:25:4d:0f:
89:a6:1b:d6:17:68:6a:20:90:c4:7f:62:8d:96:47:
87:d9:0a:a9:df:df:03:2c:cd:62:08:f1:ba:7e:6c:
71:a1:12:04:01:51:03:bb:de:55:aa:51:ff:d0:b4:
4a:db:c0:05:c4:92:14:49:9d:54:0f:ea:62:fe:6a:
62:d0:8b:1f:f5:1f:ec:76:98:1f:6f:13:6f:46:43:
25:81:90:8b:93:da:da:e9:b0:eb:5a:5b:1c:d5:62:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:27:EF:C3:04:EC:65:1A:17:94:FB:A3:20:7B:0F:2C:16:28:E8
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:ee:44:7f:35:50:f7:9a:9d:12:a6:e7:c3:76:79:18:ef:
e0:16:ac:43:1b:e2:53:00:94:9f:bb:d0:07:46:31:59:06:91:
d4:75:47:02:24:76:35:c3:66:a7:74:39:26:0e:41:be:be:ee:
95:7d:e5:69:ce:3f:66:ae:fa:c6:90:ae:df:5a:95:7d:5b:1a:
a5:3f:35:76:df:40:80:71:30:c9:f8:48:cd:f4:9b:97:b4:db:
8a:85:90:05:3b:5b:d9:a3:79:d0:7b:5a:51:71:da:92:89:29:
44:84:52:e6:d0:42:ba:0c:ac:c4:a4:dc:fe:9b:a1:4f:28:a2:
fa:94:3d:8b:5d:29:d1:7c:b2:b7:cc:0b:94:40:6f:5b:46:d8:
b7:78:62:cd:26:f7:8c:2c:78:2c:05:69:f7:5f:8d:a2:12:ab:
4e:c1:ad:37:86:f3:a8:e5:fa:f4:f3:ca:e0:b7:e4:cb:7e:2c:
23:0e:6f:2c:b6:c9:1c:fe:5c:26:c3:30:02:ca:9e:76:65:40:
31:ac:e1:54:7b:44:5c:b2:e3:b9:ea:0d:3b:30:68:37:18:56:
2d:db:d7:57:73:82:66:1b:d6:43:ff:0f:79:7b:81:fe:bd:2a:
20:8c:91:8d:03:3e:99:dc:8f:25:1c:36:5c:d2:82:31:13:65:
90:fb:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:10:21 2025 by rpki-client