Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: 2AelV0ZkZ43rvWEwCGmyidB6edSutLYzewT210uKmIc=
Subject key identifier: 00:F0:4A:BF:70:1F:51:8C:A5:B4:B6:81:C0:5A:23:81:A6:AF:D7:06
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 0197488CDA8CF3B6D6AC50E1913B37CE9E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 129D
Signing time: Sat 07 Jun 2025 04:01:19 +0000
Manifest this update: Sat 07 Jun 2025 04:01:19 +0000
Manifest next update: Sun 08 Jun 2025 04:01:19 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: wZrgwodKTgblhzK/M1ehIFFFecQEtkLmIZKL0ZchEI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:da:8c:f3:b6:d6:ac:50:e1:91:3b:37:ce:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Jun 7 04:01:19 2025 GMT
Not After : Jun 8 04:01:19 2025 GMT
Subject: CN=00f04abf701f518ca5b4b681c05a2381a6afd706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:b2:09:b3:53:4d:31:b3:df:8b:ae:8d:e8:
70:17:b3:ea:23:e2:50:49:57:42:5d:ad:49:c9:b2:
bf:65:df:a7:08:66:ff:ea:24:90:71:6e:e7:12:4c:
a6:1a:40:37:35:c0:78:fa:86:9b:93:61:1f:e5:5b:
ca:7a:ab:35:0e:5b:c7:66:83:d1:f6:f2:71:20:b9:
da:bf:19:3e:93:ee:11:2a:f1:b2:fc:54:5b:c0:ff:
16:31:37:c8:73:7f:eb:e6:db:9c:93:29:3f:15:d1:
a8:18:65:d9:1e:90:29:a4:77:d6:de:fe:d4:e8:9b:
ae:d4:a9:02:5f:e6:81:9f:f0:d6:48:7a:94:47:44:
6c:19:1d:ac:24:ec:cd:c7:f9:27:54:0d:9d:b2:23:
e6:ee:82:d7:6d:35:7e:67:0c:68:40:9f:11:aa:12:
8c:97:3c:f4:b2:db:ef:54:51:54:82:13:8c:2e:42:
d5:1c:73:af:8a:2b:68:89:16:04:10:ab:3a:02:a1:
3a:a8:1c:ef:1a:3a:65:04:02:15:9c:bb:f6:03:98:
3b:49:56:28:16:74:7c:64:62:81:7d:3d:ec:f3:34:
29:56:c0:3e:49:0d:f4:37:77:7d:10:f0:1f:f1:cf:
f3:54:09:46:3e:73:75:e5:61:e8:3d:ce:77:0b:fa:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:4A:BF:70:1F:51:8C:A5:B4:B6:81:C0:5A:23:81:A6:AF:D7:06
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:30:4b:99:bc:85:fa:11:a4:a0:2c:2b:ca:ef:4c:7c:75:
83:86:0f:16:74:01:c5:90:13:ea:2f:48:96:18:62:d0:da:37:
14:4d:17:0b:e0:57:3e:7c:0a:cb:b6:81:ad:93:1d:61:57:03:
31:b0:cf:b9:17:d2:43:97:da:97:55:69:18:41:db:ba:b7:7b:
4e:bd:b8:71:c4:d6:90:6d:b6:7b:5a:c1:83:0b:ea:5f:1a:5e:
b2:c3:00:76:64:1d:49:a2:4f:fd:1d:c8:15:90:a2:42:2a:0a:
d4:5b:d4:bd:9c:57:41:34:f8:d6:72:c2:4b:55:9e:99:02:6d:
dc:7a:2d:25:e7:49:ea:87:f1:c6:de:ad:40:4f:e8:b8:63:ba:
3e:40:ab:83:52:a4:6b:da:cf:97:cb:86:d4:aa:fb:8e:05:9f:
84:71:9e:43:4d:05:36:96:95:4e:e1:73:c3:2d:d6:9c:ac:5c:
98:99:16:43:ca:13:f3:d3:9e:db:78:07:0f:f1:ce:94:e0:33:
6d:94:39:f9:f0:a2:ee:fe:1f:cf:0f:72:51:1f:d2:bd:96:b6:
78:d9:3a:fd:7e:00:90:0d:0c:a8:5c:a3:72:84:71:77:42:66:
79:81:7f:2c:af:0e:a6:55:3a:bf:fe:d7:41:aa:28:a4:b1:5f:
52:42:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:14 2025 by rpki-client