Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: 9oz7KBUUSF1J9SPQLzK3T+UN8odX2VbICFflNMSjLQA=
Subject key identifier: 0D:C7:6D:35:D5:D1:FD:F8:88:F7:7C:5C:A1:C1:B5:00:6C:36:EA:65
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 01992C34A52B70444601D0AABCF6CFE71C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 0990
Signing time: Tue 09 Sep 2025 02:01:11 +0000
Manifest this update: Tue 09 Sep 2025 02:01:11 +0000
Manifest next update: Wed 10 Sep 2025 02:01:11 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: ug9NvI3WF2eYpf3p7mr24DcS6mzdwg+SmO31lQyuqOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:a5:2b:70:44:46:01:d0:aa:bc:f6:cf:e7:1c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Sep 9 02:01:11 2025 GMT
Not After : Sep 10 02:01:11 2025 GMT
Subject: CN=0dc76d35d5d1fdf888f77c5ca1c1b5006c36ea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:53:5d:e5:dc:c3:85:0a:47:1f:f1:01:1c:
d0:04:e4:39:db:94:e9:60:d6:8d:38:86:f9:6b:11:
bd:e5:8d:bc:6c:68:95:c0:c2:35:e9:dc:79:ea:44:
a7:be:33:b5:76:95:03:bb:4f:48:e3:85:6a:db:e1:
8b:51:57:c3:cc:77:21:4c:10:7e:2d:aa:75:ba:b0:
3c:39:8c:6f:f5:81:77:aa:32:6d:e0:d6:e9:76:86:
de:bd:62:a5:cb:79:6d:ce:5c:6d:ad:db:6e:c6:ea:
64:6c:4b:1a:fc:73:4e:68:b2:11:7b:9c:24:18:b2:
85:4a:ae:8a:ef:5d:07:e0:36:17:ee:72:cf:bf:7f:
c8:65:86:40:9c:e2:e6:31:e3:60:ba:e9:c9:f2:78:
5a:f7:e7:d8:ac:f3:0f:4b:5c:97:3f:04:bc:82:9f:
72:d9:a9:d5:e2:12:83:2c:5c:fd:0e:8f:c8:56:09:
ab:39:c9:29:bf:28:18:17:57:ba:e7:41:32:47:a9:
b2:9c:eb:82:e9:fc:36:b2:a1:38:e6:05:a3:d1:9f:
95:d2:2b:13:de:50:bb:75:4c:4b:f6:e7:a5:7a:cf:
e9:14:9e:9e:c8:6a:cd:b9:ad:8f:7b:2f:7b:33:86:
f9:84:b6:48:22:e3:03:83:f8:34:63:d4:d9:90:d4:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:6D:35:D5:D1:FD:F8:88:F7:7C:5C:A1:C1:B5:00:6C:36:EA:65
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:10:47:27:42:b4:6e:14:f1:96:6f:16:48:ff:85:97:5c:3a:
f9:b7:2a:e5:d9:0b:73:11:dc:64:e7:e6:16:db:3e:f9:94:d6:
85:bf:d2:37:cf:2d:af:28:95:9c:26:1e:b4:42:de:f0:31:ef:
39:46:77:9b:63:d6:e8:57:73:3d:d8:56:50:c0:be:90:cf:5c:
3d:89:27:f2:23:0a:88:fe:07:d8:b6:6f:30:5b:1a:64:57:f6:
75:fe:f7:a3:4b:f2:c6:9b:d7:7f:90:7b:28:7b:18:ab:53:8b:
ff:d1:3e:ff:6d:d5:2c:08:4b:4d:dc:42:4d:dc:25:88:cc:6b:
5e:d3:06:c1:c4:00:86:dc:3e:24:69:b5:c4:8d:0f:a5:d6:53:
0c:15:8d:c3:a6:43:d7:22:61:9a:30:7b:e5:34:72:88:96:a2:
ad:01:f6:2b:b3:e4:b2:ec:94:6b:65:f2:11:c5:f3:6a:77:95:
f2:dd:58:74:00:eb:c2:e7:81:ab:6f:c1:26:63:b1:62:43:51:
4c:8a:5b:22:6a:b2:b6:bb:d2:49:4c:c1:50:54:85:75:f6:d7:
34:b6:79:13:79:6d:af:ac:41:cc:8e:5e:01:dd:cb:d8:14:1d:
e1:c7:57:d4:80:bb:6e:5b:7c:5b:1f:b5:1f:ad:6d:93:c7:85:
22:a0:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:43:33 2025 by rpki-client