Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier: eVWD7ok/HlHbL1MRN1spPyBViRigpRVjWqv07+YIga8=
Subject key identifier: C9:98:6C:B6:93:73:0C:EB:FA:B8:83:7B:0B:D1:C1:BD:EE:6B:5C:5E
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 01974D0DFAA68B217F8AF85533FF373ADA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number: 0D72
Signing time: Sun 08 Jun 2025 01:00:51 +0000
Manifest this update: Sun 08 Jun 2025 01:00:51 +0000
Manifest next update: Mon 09 Jun 2025 01:00:51 +0000
Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: VHMUpwxsjEMYMJPrWTTyUf9o46OXvKDOuPJtXhz09ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:fa:a6:8b:21:7f:8a:f8:55:33:ff:37:3a:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Jun 8 01:00:51 2025 GMT
Not After : Jun 9 01:00:51 2025 GMT
Subject: CN=c9986cb693730cebfab8837b0bd1c1bdee6b5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:bb:bb:9d:13:24:a9:56:a2:74:75:e5:09:
68:ff:86:3d:61:85:33:76:39:99:3e:ff:f3:ad:e3:
55:05:3a:de:ba:cb:66:7e:df:eb:8b:9e:0e:9b:b0:
68:07:72:d0:67:1f:0e:39:02:6a:45:a4:2a:91:63:
e3:ed:f0:d5:27:52:a2:2b:e2:ea:d8:d9:2f:d0:9d:
0d:3e:53:74:15:ed:7c:19:fa:4b:27:63:51:f6:bd:
73:2f:ca:28:44:7a:18:93:df:1b:83:4b:ff:e5:19:
69:d2:5e:34:8a:c3:9e:2d:ec:52:45:cb:7a:3b:6b:
df:81:67:ae:60:c5:bd:af:33:0c:df:40:74:b3:ac:
b0:06:6b:0b:10:58:a7:c1:00:bb:32:aa:01:a1:e5:
c2:75:18:a0:30:d4:e5:16:ed:64:71:5f:2b:7e:45:
1e:07:a6:33:ce:4c:15:59:f6:42:7d:ca:ce:31:f6:
cd:95:c6:9e:55:2d:b9:1e:4d:3c:2a:7e:b5:0d:a2:
b1:38:4a:45:e2:ca:a1:3d:e5:d6:fb:0a:f1:bf:57:
19:2a:ba:df:e1:fd:52:45:64:4b:8d:a9:c5:50:96:
01:86:7a:5d:61:20:72:9c:ac:f0:ab:91:7b:f6:01:
14:4e:0b:01:10:c3:e4:d1:7c:5c:be:a2:41:5a:c1:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:6C:B6:93:73:0C:EB:FA:B8:83:7B:0B:D1:C1:BD:EE:6B:5C:5E
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:68:14:f3:3a:fc:a1:67:ec:5f:a4:ce:dd:32:6a:02:38:cc:
1e:9f:32:b4:67:f0:41:d7:ee:9a:81:a9:57:a0:03:d8:39:8d:
2b:02:67:94:bd:3e:40:9f:35:b6:51:66:ad:be:13:ba:7b:42:
30:d6:3d:7d:63:38:76:2b:de:d8:67:28:63:d7:d7:f3:d1:cb:
6d:64:eb:db:a8:ae:01:af:e2:13:2c:96:18:9d:c8:1a:35:0c:
e1:11:dd:fd:3a:0c:50:c7:fc:12:4a:3c:53:c8:ec:7a:e3:ff:
36:19:e2:b1:b5:4a:f1:18:65:05:1a:c2:e8:3c:5e:ff:42:35:
83:09:5e:28:8c:c2:3f:38:3d:e8:30:90:83:47:d1:ba:22:1c:
ec:a5:e8:1f:59:90:63:6a:8f:73:82:f5:36:3b:60:30:d5:c7:
3c:5e:28:e9:ff:c5:ae:56:6b:54:6c:05:08:0e:5c:9b:99:64:
3e:69:6b:60:04:18:57:e3:21:e5:9d:16:45:df:38:0e:f8:1c:
f5:63:1c:f9:25:38:38:01:4b:f9:63:05:79:e8:af:04:2a:31:
85:25:d5:06:ed:f1:b1:4c:75:3a:47:b9:35:24:9f:10:61:52:
2c:80:58:8a:ee:7a:51:ab:d7:58:b7:7b:01:ae:b1:89:9a:a0:
bd:6c:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:31:50 2025 by rpki-client