Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: JX4bopabhvI+nBljXTo1joD0xq2z79/uNuP7gqYcIxo=
Subject key identifier: D9:31:81:EB:96:3B:ED:EB:3C:38:A9:C3:97:3D:2A:FC:0B:43:43:78
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 01974630288F9C2C492620417EF902A89DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0BF8
Signing time: Fri 06 Jun 2025 17:00:50 +0000
Manifest this update: Fri 06 Jun 2025 17:00:50 +0000
Manifest next update: Sat 07 Jun 2025 17:00:50 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: 3aFrWQ2gsfhPzknnDcJctFg4geuH7xkQABF4iJxWltY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:28:8f:9c:2c:49:26:20:41:7e:f9:02:a8:9d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jun 6 17:00:50 2025 GMT
Not After : Jun 7 17:00:50 2025 GMT
Subject: CN=d93181eb963bedeb3c38a9c3973d2afc0b434378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:48:c7:19:78:2d:e6:24:f3:47:86:52:0a:
d2:13:2a:7b:c0:6f:23:b9:66:ab:d1:0c:ff:1f:57:
6a:c5:14:da:9b:21:15:e1:fb:39:a6:9f:38:9f:eb:
3a:39:44:b2:6f:50:34:42:78:f2:53:fa:30:9c:4f:
67:58:8a:b4:5e:59:c4:06:49:f0:7c:0d:ac:40:1b:
b3:f7:6f:d6:06:21:df:16:a2:3c:5e:06:51:f7:0c:
e8:4f:d7:ac:c6:ed:ed:d1:a6:bc:53:92:15:c5:01:
1c:22:09:73:8b:bc:38:eb:92:32:f0:55:cb:85:8d:
1d:35:15:15:c7:b4:05:d7:b7:33:f1:58:bd:27:94:
6e:9e:32:b3:67:7b:57:ad:2e:d3:c5:e8:c6:1c:62:
0a:09:62:74:2f:49:38:3c:d0:01:ce:b2:d7:b5:ff:
36:cc:ae:75:6a:ba:cd:b4:ac:3e:14:a6:9d:2b:51:
45:c3:0a:a2:7c:cf:24:c2:46:26:2d:0c:ca:90:2d:
94:2e:95:3c:c6:d6:8f:d4:e2:4f:f7:2f:f9:67:00:
d9:a6:ed:5d:4f:91:fb:93:b5:28:c0:6a:70:79:f5:
05:02:2e:85:d6:27:f8:fd:b9:41:91:d1:bf:08:ae:
e6:2f:e0:af:8f:6e:38:1c:8f:f4:c2:f6:3c:24:07:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:81:EB:96:3B:ED:EB:3C:38:A9:C3:97:3D:2A:FC:0B:43:43:78
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b2:07:c6:41:10:db:c7:da:e3:59:46:23:68:dd:4d:f4:73:
16:63:e1:ac:57:a0:c8:05:d4:4c:58:05:cf:7c:0d:8f:e9:16:
66:b4:7a:25:75:ed:de:38:1e:f9:7e:e2:94:c3:e9:41:60:34:
6d:53:63:1d:a3:22:59:46:42:71:9a:3e:e3:a7:14:ed:1e:75:
7a:ab:00:ee:0d:65:91:48:71:b5:2f:e9:7f:e7:03:5a:9e:cc:
5a:ba:5d:4b:53:8c:38:a4:1e:2f:97:a5:a7:5a:36:61:f2:8f:
5e:e5:81:77:f5:c7:1e:60:64:b6:a1:1c:f0:7f:f8:42:66:80:
15:79:04:a3:22:28:81:ac:ec:e1:c7:52:26:30:52:89:5e:c0:
46:c3:f5:76:cb:02:66:67:36:0c:2b:f4:46:89:d4:4f:77:b4:
f1:45:24:ac:d7:98:ec:18:fe:fa:67:9c:41:5a:62:ed:d2:c6:
c9:c2:8b:96:1e:f4:b9:83:1b:43:16:12:dc:a1:53:69:90:6c:
0f:a1:62:a1:c3:eb:6e:53:7a:86:de:48:ba:57:0e:47:94:85:
05:5f:8c:f0:5e:c2:56:80:ed:c7:fc:ba:0d:db:7c:d7:6d:ef:
62:6f:c5:8e:84:7d:3a:c2:05:3c:43:a2:23:23:e0:e3:a6:9a:
85:01:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:55 2025 by rpki-client