Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
File: uHk6g7BixN6WkELwnBcoBmY2_cM.mft (raw, json)
Hash identifier: Oiy60SguUxgTJb/qoVDDf0kFcSwBgF8KXQmNMYaMO04=
Subject key identifier: 9B:BB:12:F2:C3:09:6F:F1:3E:56:4D:C6:38:AE:B8:7C:7D:39:4B:BF
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Certificate issuer: /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial: 01974A7B654B957F98C896F0E99320821F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
Manifest number: 05DC
Signing time: Sat 07 Jun 2025 13:01:30 +0000
Manifest this update: Sat 07 Jun 2025 13:01:30 +0000
Manifest next update: Sun 08 Jun 2025 13:01:30 +0000
Files and hashes: 1: a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa (hash: baiAvJGpUsAZJ7npsCUrORP22mHXOv/h6ETJi81b0fM=)
2: uHk6g7BixN6WkELwnBcoBmY2_cM.crl (hash: YR80VSWe3ZmfCDjd2CS0DDD6KE7+9R2iP8I5XF4Gfw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:65:4b:95:7f:98:c8:96:f0:e9:93:20:82:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
Validity
Not Before: Jun 7 13:01:30 2025 GMT
Not After : Jun 8 13:01:30 2025 GMT
Subject: CN=9bbb12f2c3096ff13e564dc638aeb87c7d394bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:36:f4:40:69:ef:50:c0:89:88:da:86:8f:
e8:b8:4d:d8:1a:ad:9d:79:30:47:f4:d3:fe:8f:90:
5a:b8:84:1d:ef:f4:fc:0c:60:f3:c1:e5:dd:8e:78:
5f:22:5a:62:99:87:d4:97:10:d2:d7:ed:33:b6:c2:
38:72:43:1a:97:b2:f2:dd:d1:fd:57:21:2e:7c:08:
47:1f:23:4d:9b:17:e3:51:54:cf:8c:41:eb:cc:29:
94:ff:a0:c7:1e:8e:84:16:de:dc:34:b4:95:9d:7c:
60:d2:8e:7f:fb:b0:31:0b:d2:b6:f7:bc:f1:1d:a1:
41:33:f8:51:4f:b1:65:87:c1:83:f9:b2:7e:89:e3:
54:aa:e6:cc:27:bd:c0:1e:57:df:9b:6d:19:f5:0f:
3a:52:4b:f8:a0:75:f9:b7:53:5f:de:53:21:78:e8:
a0:68:c9:96:af:c9:84:6e:0c:d1:ee:07:af:c5:08:
90:3a:79:d1:11:75:e3:63:7e:06:ff:75:c0:8b:76:
2b:5c:f2:c8:35:09:71:00:71:e0:84:28:aa:be:c5:
7c:c4:75:fb:94:78:ae:d1:21:fb:fd:3b:f6:96:0a:
e6:40:76:ff:85:ba:a8:88:f7:b5:f7:e8:49:08:4d:
40:8d:e7:53:28:e6:18:32:ce:e0:db:71:0f:5d:81:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:12:F2:C3:09:6F:F1:3E:56:4D:C6:38:AE:B8:7C:7D:39:4B:BF
X509v3 Authority Key Identifier:
keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:57:82:ff:98:e7:f7:34:79:62:5e:5a:18:53:2c:ba:f6:
93:0e:22:a5:fe:9a:37:50:25:09:54:c1:c7:69:fe:74:25:78:
e9:7a:54:a4:c6:27:26:60:44:40:0a:6c:f6:a5:eb:c5:5a:c9:
86:3d:73:43:14:43:e0:eb:ea:3e:d9:37:93:e1:fe:39:6e:3e:
18:28:d2:8b:71:29:08:67:a8:bb:cf:2d:75:40:09:ec:fa:07:
78:3f:09:f7:ee:f4:1e:a7:f5:20:7e:36:8d:64:6d:4a:b7:5f:
b7:b1:59:16:51:96:17:0b:b3:84:7d:4a:53:19:a5:61:76:0c:
08:cb:4f:36:6a:cc:5f:ba:b6:45:a1:3d:4c:03:ca:b9:02:44:
46:fe:88:ac:da:9b:8a:5c:1a:70:03:2c:69:b8:92:7b:a8:2b:
d4:19:ae:66:e4:c1:ce:56:83:c3:db:77:70:71:33:64:ad:02:
38:47:69:1b:fc:c1:7e:3d:5d:b6:7e:0e:30:65:9a:6c:d3:c3:
65:e9:6e:be:5a:9e:2b:56:8d:d0:f7:ba:0a:fc:32:c5:06:3e:
48:ee:62:a7:f5:45:80:48:b6:62:8a:9d:8b:a5:06:97:b4:35:
d6:f7:d5:1a:25:4c:47:9d:d0:45:79:cb:5a:34:da:cf:f5:4a:
ba:f2:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:20 2025 by rpki-client