Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: vOWdCK68rKUdA7f0JQvU2/TBF0YxZgDntSYNYHp+wGo=
Subject key identifier: 8E:A2:6A:1A:A8:16:40:C0:77:44:B8:C0:4A:17:57:90:57:21:DC:DC
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 0198499C50EAADB5F049D5960EC27E1CD68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 113C
Signing time: Sun 27 Jul 2025 02:00:37 +0000
Manifest this update: Sun 27 Jul 2025 02:00:37 +0000
Manifest next update: Mon 28 Jul 2025 02:00:37 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: loK7uwfwv/j+wG0HDRck7ONH276Uq0+KYoVdkrPFYLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:50:ea:ad:b5:f0:49:d5:96:0e:c2:7e:1c:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Jul 27 02:00:37 2025 GMT
Not After : Jul 28 02:00:37 2025 GMT
Subject: CN=8ea26a1aa81640c07744b8c04a1757905721dcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:2f:ea:3d:5c:3f:7e:ad:e0:ff:ab:d3:77:
44:e8:fa:f1:95:5e:13:68:4a:59:e2:f4:a2:50:39:
6e:5f:75:2f:7c:11:3b:a3:08:4f:24:49:a7:d5:a5:
4d:b1:21:32:c8:54:f0:4e:f3:c7:65:bb:34:ca:c8:
24:51:cb:84:58:8f:2c:e7:b4:1b:8e:c9:85:c6:33:
a6:c3:7c:4a:fd:42:5a:87:35:1d:47:61:b3:9d:33:
69:bd:2b:b9:a8:42:b2:af:7c:8b:60:ec:46:36:eb:
ec:b3:8c:86:ed:dd:0f:8a:a6:5d:87:60:e2:68:88:
6d:96:51:d5:5c:e4:4a:1a:a1:d4:b1:27:03:34:48:
f7:83:d4:cf:1d:e4:f2:19:03:7a:49:7d:8a:e1:32:
05:8c:0a:cb:a3:61:0e:dc:3d:f4:9b:57:38:37:15:
df:62:9e:32:1a:f2:af:01:bd:63:48:f3:ba:62:0a:
1b:b7:a1:28:fd:51:94:8d:c6:a5:4d:82:92:94:df:
4b:59:ac:8d:fd:4e:1d:cf:a0:34:e0:f3:67:b2:1a:
5e:87:d9:03:3f:78:cf:36:d3:f3:50:06:ba:82:a5:
33:07:d6:c8:cd:a2:88:8c:c5:88:ee:9a:e0:aa:c8:
dd:bf:f8:61:18:74:6e:81:e4:11:b5:70:79:df:11:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:6A:1A:A8:16:40:C0:77:44:B8:C0:4A:17:57:90:57:21:DC:DC
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:50:b6:b3:65:76:99:c3:1d:b5:be:7a:33:06:ee:d4:60:cc:
2a:c1:b2:80:3d:be:13:84:1a:bf:93:32:cf:04:a6:5b:c4:6d:
43:f9:e8:d7:dd:90:2d:e7:c1:a4:5d:8c:31:47:71:c2:2c:82:
99:33:10:36:05:c6:1d:16:bb:bf:94:5b:fd:f4:a4:e6:2e:e9:
a3:3d:62:70:e9:d7:d2:8f:eb:eb:27:a7:43:a3:97:05:b1:3f:
2e:62:28:01:29:4d:20:2b:cc:bd:2c:6c:8f:b7:e7:b4:12:2f:
77:a6:8f:2e:58:17:a6:36:c1:df:a4:08:32:d7:ee:13:78:bd:
b2:d6:55:80:fd:f6:b5:2d:8a:27:59:e7:36:2b:0b:a2:46:b5:
8a:2d:51:97:3d:2c:8c:e9:96:7c:3b:dd:30:74:45:dc:cd:5f:
17:da:da:06:78:cd:14:9e:8b:b2:6d:6a:3b:17:61:44:f5:a5:
cf:b7:25:2b:f5:a7:a2:a7:4a:5a:61:06:c3:e0:9f:c4:6c:ef:
17:8b:91:33:e4:5f:8c:64:81:44:8c:5a:b7:5c:a1:f9:c3:17:
ee:64:8a:bb:22:e5:5f:b7:9a:f3:f3:25:9c:0e:e0:bd:48:17:
a5:59:8e:66:bb:16:6d:b9:78:b8:d4:be:3d:6d:04:de:e3:82:
28:b8:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:04 2025 by rpki-client