Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: tprODRCRBD57b++oGq63/Hk6jD+iAH2unfjyjLdOmVM=
Subject key identifier: D8:BF:16:9A:15:2D:59:90:DF:91:A3:50:7E:78:7D:85:30:32:C3:13
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 019922C3254B8657098BF6F711E3AFE72C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:38 +0000
Manifest this update: Sun 07 Sep 2025 06:00:38 +0000
Manifest next update: Mon 08 Sep 2025 06:00:38 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: BUj0ahlcjRX0oToO4R36ASDD0hLMV7WEx6BN7HFVtMI=)
2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:25:4b:86:57:09:8b:f6:f7:11:e3:af:e7:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Sep 7 06:00:38 2025 GMT
Not After : Sep 8 06:00:38 2025 GMT
Subject: CN=d8bf169a152d5990df91a3507e787d853032c313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:4b:fc:47:89:33:2d:8a:94:cc:4f:1f:12:
bf:93:d1:e3:6e:d7:b1:1a:15:ca:ac:83:79:63:94:
eb:d9:41:35:20:e3:a3:3c:55:ac:76:9d:86:1e:08:
f3:d7:6c:71:c2:d4:1a:cf:b7:63:37:aa:53:cd:ac:
37:a3:d8:5e:7e:a3:c9:6a:49:de:d4:f9:bc:ba:02:
5b:16:95:47:bc:c8:51:b8:61:ab:b3:69:fb:99:b0:
62:8a:d2:9b:15:0d:24:31:9a:8c:0f:27:b3:14:19:
6f:0b:59:48:bd:82:8c:8f:f0:05:2f:89:bc:57:e9:
a9:c3:fd:6a:86:ec:3e:ea:68:da:bd:30:e1:65:2b:
15:0e:38:34:4f:bc:f8:6c:d0:12:16:72:eb:ea:3c:
c0:51:eb:3a:8a:97:5c:0f:36:24:3d:93:6f:70:9a:
af:a9:a7:c6:c3:aa:f8:74:36:be:31:7e:97:64:cc:
41:f7:61:7c:8c:cc:c0:45:41:38:c0:e3:82:2e:86:
83:be:5e:fb:a1:97:99:41:30:50:92:14:b6:31:65:
12:78:22:6e:85:11:f1:7b:02:47:4d:64:a1:28:69:
6f:06:8c:74:e0:5b:74:db:77:05:ec:70:aa:92:bc:
b0:83:86:36:4f:14:56:16:7e:65:c9:dc:69:b1:98:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:16:9A:15:2D:59:90:DF:91:A3:50:7E:78:7D:85:30:32:C3:13
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:84:3b:10:b4:68:bf:13:39:ee:35:67:3e:a2:a7:93:cf:
49:be:f5:59:d9:3c:58:0d:7a:18:e1:96:29:fb:20:ff:82:3c:
55:85:50:49:63:12:3f:16:64:99:a0:5f:ab:6b:c2:aa:fe:66:
d5:1f:cb:ab:60:8f:cb:d3:9a:f4:a9:58:42:aa:4f:32:9b:0d:
8e:98:7a:02:9b:62:96:45:4d:52:26:86:10:30:e6:a5:82:9c:
87:3e:d1:f9:df:bf:03:ec:98:bf:6c:f8:96:cb:27:e9:c3:80:
ec:d3:a9:8a:6f:2d:89:15:cf:fc:56:6c:7a:0c:a9:41:07:ab:
b5:a9:61:57:51:d1:53:44:bb:6c:7e:9e:33:5b:cf:4c:29:d0:
92:99:0a:b3:69:d2:f2:5b:f7:cd:bb:a5:5e:e4:be:d8:fb:d8:
08:d1:3a:a9:0c:f6:46:8a:8a:06:36:3b:27:28:42:be:a1:16:
81:21:21:b0:36:cc:b5:e7:91:59:55:a6:38:00:e7:cc:ed:e1:
08:0f:0c:58:14:da:30:69:51:81:97:14:af:a5:1b:41:35:b1:
93:62:67:b2:72:02:73:fc:de:f3:59:18:15:0e:0f:52:9d:e4:
96:95:1b:a9:55:e0:bb:85:c4:05:56:c2:60:7f:b7:3b:78:a9:
4d:8e:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:13 2025 by rpki-client