
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: th5bGA2ySX+tXJgiB76c7otX5wD2ETnWl+FxT76bFpI=
Subject key identifier: 9A:F1:03:F2:D5:75:90:BB:62:4B:64:34:49:48:08:93:B2:47:5E:37
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019751217B348463DE0ED79A493787E346EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 04CC
Signing time: Sun 08 Jun 2025 20:00:38 +0000
Manifest this update: Sun 08 Jun 2025 20:00:38 +0000
Manifest next update: Mon 09 Jun 2025 20:00:38 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: ukoTLv9JI38lGulupJ0rUfpISYg827JVpwK4upX9y84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:7b:34:84:63:de:0e:d7:9a:49:37:87:e3:46:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Jun 8 20:00:38 2025 GMT
Not After : Jun 9 20:00:38 2025 GMT
Subject: CN=9af103f2d57590bb624b643449480893b2475e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:04:58:e7:ca:78:14:0f:71:a0:b6:02:50:
ce:5e:d1:cd:3c:42:2e:c3:94:66:2b:62:a1:65:11:
9a:d2:2f:d8:47:6b:83:34:26:c8:10:04:a3:08:d8:
3a:f9:14:30:46:cb:b4:f4:c7:45:02:eb:d5:ef:c0:
f0:78:cd:e0:32:b0:ca:7d:bb:98:bd:d6:ee:6d:0e:
b3:79:7e:ae:e2:6e:85:35:2a:af:6b:1b:e4:29:8c:
ba:41:80:82:b9:a6:fd:c9:ae:17:0e:a2:ab:88:2d:
a1:8f:5b:0c:50:d3:b2:6d:79:fb:53:2b:a0:e4:7f:
77:49:8e:ab:e2:d7:31:b7:dd:d0:c4:53:75:13:f1:
53:9c:24:c9:0f:43:65:ce:86:d2:4d:76:22:5f:ab:
f9:7e:f5:44:d0:cb:e0:88:53:7b:6d:16:b8:71:b4:
36:f8:04:df:bd:b2:16:ce:a9:b6:ef:01:ed:58:20:
cc:27:c8:4a:4b:ed:13:ed:9e:7b:04:0c:f8:9c:8c:
7d:92:ee:10:b9:29:3e:ca:7c:50:1e:90:71:40:49:
da:95:45:d0:18:b9:ea:a5:83:c8:43:1f:48:66:69:
fe:7f:44:05:7f:07:3a:3b:69:9e:37:8c:26:28:31:
a3:fb:b8:66:d0:f3:61:3f:b1:8f:99:1d:5f:77:26:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:03:F2:D5:75:90:BB:62:4B:64:34:49:48:08:93:B2:47:5E:37
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:89:b2:34:56:f7:1b:09:1e:9f:7d:78:c3:ef:1a:3a:4a:
d0:5e:68:07:ba:03:9f:c4:d5:bd:2a:bd:68:72:64:c0:be:31:
38:89:47:bb:8b:a0:58:5e:d7:6e:28:fe:3d:b0:f4:96:4c:93:
8e:e9:3a:f1:0a:51:7e:e7:60:9d:2b:09:b8:31:d6:82:69:99:
18:52:6f:44:99:3e:73:c6:0e:f0:53:53:ed:8c:68:e8:74:82:
6e:f1:db:8c:e8:7a:50:95:76:ba:7e:73:f7:ac:f3:71:42:7d:
57:31:33:10:b3:9a:d9:3d:6f:b5:2c:79:88:00:3f:76:10:89:
e1:e5:55:08:d1:5d:99:10:f4:68:72:a1:e7:94:f3:1a:7b:f7:
a1:59:ec:92:41:a2:32:7b:3c:be:64:2c:1f:c5:b9:ff:4b:1b:
2c:52:70:07:dd:01:11:58:27:4c:1a:dd:9f:36:e5:77:b5:e8:
dc:f2:69:4a:ab:52:26:e1:a1:20:0e:fd:0b:07:14:d4:00:97:
95:b8:2b:fc:86:47:d1:76:7b:a1:30:d4:b7:93:92:81:d6:2f:
c8:b0:e2:d3:2c:3b:cc:09:91:9f:a0:c0:fe:ae:e8:12:da:3f:
6b:ec:ae:b1:70:75:55:60:e4:33:9e:e3:0e:ab:1b:6e:0a:8c:
cb:8a:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:47 2025 by rpki-client