
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: OsXu9Pw1z/1elHWWNElCgWpj1o8ImPMhk+189gEiZLs=
Subject key identifier: 02:FE:CF:D1:23:23:31:1D:3C:D5:C1:A7:4B:A1:4F:A9:AE:35:C9:0C
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019770079176D63A18E3F29C9E003319F4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 1274
Signing time: Sat 14 Jun 2025 20:00:33 +0000
Manifest this update: Sat 14 Jun 2025 20:00:33 +0000
Manifest next update: Sun 15 Jun 2025 20:00:33 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: K9fa2OS2PZe32kufcuPEXCuKGkyBHNdGezIV19rHmOU=)
2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:91:76:d6:3a:18:e3:f2:9c:9e:00:33:19:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Jun 14 20:00:33 2025 GMT
Not After : Jun 15 20:00:33 2025 GMT
Subject: CN=02fecfd12323311d3cd5c1a74ba14fa9ae35c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:91:a9:72:5a:b5:88:47:a3:6e:e2:59:ee:
15:58:bd:ba:b5:7b:04:a2:f2:a6:96:c9:25:a1:2c:
88:c9:04:ae:71:7f:4b:47:81:bd:b3:90:45:0b:35:
7a:0c:48:13:ca:6a:69:6f:8e:68:16:64:99:f8:6f:
ce:d7:95:90:c4:2a:37:9c:0a:94:2f:c5:2b:59:d1:
95:fb:fe:3c:39:a0:4f:83:32:d1:3a:6d:ab:7b:28:
36:85:95:66:69:43:71:84:51:ab:ed:57:38:30:24:
50:32:4e:6a:26:b2:fd:3d:cb:6f:94:8f:12:0f:d6:
bc:92:50:5d:cc:35:36:db:45:30:1b:0f:4d:b6:cb:
15:07:42:83:f6:9e:9f:bc:11:d1:5c:84:a7:4e:29:
58:f8:3e:43:c1:ad:2d:3f:c5:45:33:e5:e1:df:1b:
e3:cb:74:a9:9b:7f:5a:db:3b:56:0b:dd:33:74:16:
a7:0a:db:44:88:c3:13:fc:ed:a6:56:67:d5:76:d3:
b5:7d:d8:bd:11:82:3d:30:21:97:be:70:e7:4d:81:
c7:22:9f:40:61:4d:5d:d3:24:06:22:2e:d5:ea:5e:
de:59:75:54:77:c7:9d:2a:04:d4:8b:62:b6:13:3c:
d7:ff:96:0f:93:70:15:45:4b:57:89:73:f4:a2:fe:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:CF:D1:23:23:31:1D:3C:D5:C1:A7:4B:A1:4F:A9:AE:35:C9:0C
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:0f:7e:d4:f0:91:1b:32:df:d5:4f:e7:63:10:b5:e0:f9:
fc:85:ec:5e:82:6d:79:5e:28:be:00:82:9d:f7:27:df:c6:6b:
ae:db:6c:f3:41:a2:87:1e:18:c4:db:5c:80:02:ba:a4:14:db:
4f:df:e1:31:6c:8f:49:19:79:8a:1f:c1:9e:aa:8e:13:f2:78:
d0:37:32:86:77:e3:2d:52:95:b7:2d:f3:e5:e0:49:0a:97:2a:
95:f2:ff:cd:30:1c:ea:6f:84:97:61:4e:c9:7c:07:e4:4b:df:
bf:c9:d8:0a:85:8e:8b:2d:07:dc:43:e4:6d:12:7c:f8:13:3d:
ad:d8:ed:db:fd:d7:21:23:4f:a6:d6:c1:5b:ef:a8:cf:03:dd:
49:53:f6:ed:bd:7c:eb:42:a8:45:9b:c9:a7:f2:d2:4b:f8:20:
69:bb:30:75:10:d6:1e:c0:d8:06:35:a6:46:0c:6b:8d:0e:d8:
f0:83:42:9a:37:1c:d1:bc:ec:09:2d:d3:b3:a3:ab:0b:64:66:
6c:a9:24:ea:e1:7a:21:6a:af:c8:83:6a:26:6d:3a:c6:30:7a:
4d:d0:bc:1e:cf:fc:1b:5e:fc:07:c0:48:f5:63:f3:01:f0:37:
90:26:0c:24:d9:9a:81:7e:81:f0:78:33:da:10:fa:fd:4b:86:
8a:82:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:39 2025 by rpki-client