Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File: uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier: Zgc/qDKE4bSS2T7u89xM6pjJ3SkX/B2hLjTdIQmIa4g=
Subject key identifier: 12:B5:E6:CA:77:AD:9A:BA:A9:41:1D:6B:97:90:31:06:A5:7C:83:18
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial: 0199233176FF27A692A04F9C59A2286A1CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number: 061C
Signing time: Sun 07 Sep 2025 08:01:08 +0000
Manifest this update: Sun 07 Sep 2025 08:01:08 +0000
Manifest next update: Mon 08 Sep 2025 08:01:08 +0000
Files and hashes: 1: Ad9fi9qlun6YM_gFezIokOCQkLs.roa (hash: S4qKDAh1WyrdkcGPs8CGFXh64ebt7vNp8v8VXZtyJ2o=)
2: SW07hbnebVdCqrbU8syhynqAX7c.roa (hash: fHq3wBn0v/bUheMJ6DOC8R/E4a6CfE2fSibEdOoR5GY=)
3: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: DcSM6JBweBeCnWH9T+hf7kW/CFDLJ2D2NpIpthSLzKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:76:ff:27:a6:92:a0:4f:9c:59:a2:28:6a:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Validity
Not Before: Sep 7 08:01:08 2025 GMT
Not After : Sep 8 08:01:08 2025 GMT
Subject: CN=12b5e6ca77ad9abaa9411d6b97903106a57c8318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:1d:86:ea:0b:02:28:2c:18:b5:fa:2d:13:
03:f2:f1:83:c2:62:19:16:0f:3d:48:e4:2f:cd:5e:
d3:6d:60:c2:73:f3:eb:a3:fc:1f:0b:8a:13:06:43:
f7:3b:28:bf:7c:13:38:6c:ef:48:19:41:b4:db:5f:
9b:e7:47:7b:37:48:33:b9:83:b5:42:7d:79:fe:4c:
2d:46:bb:75:2f:07:06:3d:df:24:f3:cb:0a:55:03:
7e:ec:fe:7c:06:73:24:de:8e:20:4b:d4:c5:78:2a:
75:5f:1b:d8:ed:f6:3b:5f:81:d5:f8:92:99:bd:ff:
4a:4f:4f:bb:df:09:32:f8:81:a0:59:56:b0:d8:0e:
13:16:a1:e3:c3:ff:65:60:94:59:78:03:ad:5a:2e:
3e:1a:10:c1:f1:da:b0:8f:83:71:41:0f:9f:44:a9:
a2:d7:d8:b6:ea:5b:44:61:c4:b5:a7:cc:f7:e8:84:
f8:c1:f9:0a:5c:5a:6e:38:13:b1:fd:1d:f8:f7:17:
98:e7:38:6a:7a:b0:b4:49:08:81:e9:88:d6:db:04:
cb:f7:f1:30:2b:ce:cd:97:38:1d:49:71:bf:6b:85:
35:86:2b:20:3e:6c:30:41:47:b7:d2:3e:96:d2:31:
8c:7f:98:f3:a6:8e:92:17:16:da:bc:27:53:c0:2b:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:E6:CA:77:AD:9A:BA:A9:41:1D:6B:97:90:31:06:A5:7C:83:18
X509v3 Authority Key Identifier:
keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:18:b1:63:db:2b:08:a3:96:22:22:ce:57:0d:69:29:a7:a8:
29:6a:39:f5:e5:fc:e9:b0:8f:a7:7d:a5:d0:d7:25:5b:f4:42:
c7:bd:81:89:3c:7a:a5:5e:a8:95:b4:6e:28:e8:82:7a:17:1a:
eb:3c:00:a0:17:ac:88:74:59:81:49:e7:68:9f:ed:88:3e:e1:
6b:a5:3d:e4:f3:02:21:c5:b5:e0:fe:5a:62:53:f4:f2:04:b6:
15:97:09:1a:d9:2c:dc:64:28:77:d7:52:92:34:77:8f:1a:aa:
21:25:cb:53:3b:c9:88:70:91:f4:a0:cd:ec:77:48:52:7f:45:
bf:cc:0f:2e:bd:ac:98:62:3a:fc:c8:09:1e:9a:04:ef:28:93:
05:f1:10:b6:23:54:6f:fd:f3:ad:b3:bc:b6:91:e5:2e:37:fe:
7d:70:5c:c0:b5:4c:93:cc:a8:6c:e2:c4:38:26:2f:26:d3:83:
79:5c:8e:d8:84:67:b9:83:de:f9:2c:48:d5:a2:f0:ca:b9:ef:
8c:2a:63:c7:a3:6d:c2:91:8f:a5:35:8a:b9:39:1f:17:2a:c9:
fb:f7:85:06:19:e4:da:51:90:59:27:86:97:48:f4:ae:42:42:
63:22:d3:14:5a:34:d8:40:8e:3e:0c:61:be:93:54:c6:f4:11:
a9:e7:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:49 2025 by rpki-client