Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: Y4Z73tY0LS7dPQZXpnlkDliMUFN0sF8UZd6nXTJ5NVk=
Subject key identifier: 84:3C:7B:31:5D:60:50:2C:C1:44:AF:CB:16:85:C3:EA:54:E7:23:69
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 019748C2E7ABE72649EAD41F0678A377E3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1588
Signing time: Sat 07 Jun 2025 05:00:22 +0000
Manifest this update: Sat 07 Jun 2025 05:00:22 +0000
Manifest next update: Sun 08 Jun 2025 05:00:22 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: 8tr94Zn3UED98LAVOj0gILT4r2qw4/+5pofEnz1myKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:e7:ab:e7:26:49:ea:d4:1f:06:78:a3:77:e3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Jun 7 05:00:22 2025 GMT
Not After : Jun 8 05:00:22 2025 GMT
Subject: CN=843c7b315d60502cc144afcb1685c3ea54e72369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:ac:5e:43:7a:bc:03:e4:32:bb:d7:bb:4a:
96:6f:a0:15:a1:bd:e5:1f:3e:c8:c4:04:77:8b:4d:
d1:b3:c0:88:16:22:b3:ad:3e:10:5c:3f:62:91:eb:
45:d6:16:97:13:a6:e4:ba:b4:9b:e9:d9:3b:d3:55:
70:57:37:b3:68:de:13:4e:4f:76:4c:76:e6:05:46:
f9:b4:7d:13:09:6b:f7:c7:77:eb:c2:0c:60:e6:5b:
56:98:bc:fb:ab:a1:7d:b6:8b:ac:39:40:b6:b1:7d:
7d:3d:86:08:ee:7d:ec:c7:48:d4:f8:94:b0:15:ed:
5e:24:8a:24:4d:70:d0:db:97:0e:c5:c9:1b:6b:61:
e2:6e:69:0c:46:a7:fb:c1:f8:76:9a:99:0e:f2:ee:
1f:45:cb:2a:ee:6e:1f:ff:54:f0:5f:9f:07:e7:45:
b6:d6:35:fb:b3:4b:cb:27:d1:4a:fb:a0:74:d6:5e:
7d:7b:f3:9c:4a:9c:36:e8:ac:13:b8:a9:58:38:17:
d7:ab:c8:81:5a:9a:4a:09:6a:90:4d:4c:d7:59:f1:
45:59:36:03:d8:07:62:74:d4:98:a3:bf:30:cb:0d:
23:58:86:7d:cc:ee:6b:b4:6d:87:c2:32:c6:e5:7f:
d5:74:15:02:5c:80:43:83:cf:b2:fc:54:33:39:1d:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:7B:31:5D:60:50:2C:C1:44:AF:CB:16:85:C3:EA:54:E7:23:69
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e7:32:73:a6:29:e2:f6:6f:22:e3:09:db:3d:72:1a:f5:82:
39:80:90:2c:44:da:06:ba:b2:7b:0f:a8:b3:a7:d4:27:04:ed:
38:72:dc:d5:dc:45:4e:a5:5d:53:af:08:08:98:bf:44:54:5c:
37:5d:6f:2b:f1:c6:8b:b1:35:75:eb:b0:b9:82:e7:d4:42:5c:
fc:9e:27:a7:08:be:77:28:57:8a:00:8e:e1:fa:70:37:75:5e:
13:e7:0e:26:f6:e2:11:ee:f3:de:71:0a:11:e4:10:9a:9a:18:
da:cc:fc:af:9e:50:f5:b2:ad:7a:b5:79:83:ab:00:13:1a:6f:
e6:74:e9:42:20:55:01:9a:5c:08:07:cf:65:48:fd:8f:42:dc:
0b:7c:96:ec:0e:6f:8d:92:96:e7:c0:5c:f2:4d:b4:6d:b7:d4:
55:b7:a1:a2:1a:d3:30:d0:cd:7a:59:49:ec:df:67:42:52:c1:
c4:92:bf:d1:1e:a5:2d:67:18:23:66:61:71:57:3b:42:0a:1c:
0e:26:2a:34:ec:77:cb:e0:5f:1e:af:69:e8:a9:9b:e8:60:36:
75:80:48:e2:4c:11:c4:f7:54:10:6a:5c:0d:48:d2:64:fa:51:
26:d9:aa:c2:63:1f:f7:b6:bb:e1:8f:6d:d2:ce:f9:67:5c:23:
71:96:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:29 2025 by rpki-client