Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: aSzKY8klNTaZta9U0ihwosvVT7nSBIw/3PdCE95uHsc=
Subject key identifier: A9:74:3C:E4:54:6A:7B:8F:C1:66:58:94:4E:AB:61:75:C5:7F:D2:99
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 01987F0A4FF68465A82C91FFC536F8E5A983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 04B0
Signing time: Wed 06 Aug 2025 11:00:38 +0000
Manifest this update: Wed 06 Aug 2025 11:00:38 +0000
Manifest next update: Thu 07 Aug 2025 11:00:38 +0000
Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: TIj6lbw3R6r49dMDCF3qMtt1WN05UAdc5L3A5HRu52w=)
2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:4f:f6:84:65:a8:2c:91:ff:c5:36:f8:e5:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Aug 6 11:00:38 2025 GMT
Not After : Aug 7 11:00:38 2025 GMT
Subject: CN=a9743ce4546a7b8fc16658944eab6175c57fd299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:b9:d0:91:be:2c:39:70:20:58:38:85:fb:
f0:82:04:07:d9:a3:61:9f:e3:02:17:7d:33:bb:b4:
55:71:13:7b:2b:63:93:fe:5f:3c:37:5b:fd:0a:eb:
5e:45:6d:06:2c:31:d1:81:cf:4a:b3:41:b0:d9:57:
5f:37:e9:4f:ce:b4:77:9a:1a:fd:23:3b:e0:25:ae:
c2:5e:ff:30:13:22:0b:8a:25:08:f4:e4:ba:64:26:
a8:0b:1c:e3:08:4b:97:4c:db:87:e0:bf:fb:fa:3e:
9e:10:dc:61:30:53:70:35:a8:8a:31:ab:dd:6f:d9:
fe:02:ec:19:ea:48:79:bc:b8:b6:31:61:e4:9e:da:
2a:6a:6c:76:64:e9:d4:a8:77:62:73:5a:1b:b3:57:
44:56:b7:ff:eb:a6:59:f4:1c:bb:c8:3c:7a:d0:1a:
b0:9e:d4:37:93:63:d3:a1:c1:bf:73:55:6e:49:2c:
34:f9:57:2c:48:0f:49:fd:e0:37:9b:5f:2a:7d:77:
47:3d:1f:f8:7f:58:61:a9:34:89:5f:61:8d:f2:aa:
2a:c5:45:df:16:7d:10:d2:d6:da:71:46:5b:f7:9a:
b7:9f:aa:37:f7:c3:5c:86:58:20:a9:19:61:d9:1c:
7d:f8:d4:3b:24:b4:df:3e:09:5c:4e:a2:20:38:53:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:74:3C:E4:54:6A:7B:8F:C1:66:58:94:4E:AB:61:75:C5:7F:D2:99
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:aa:15:bd:ac:9b:b5:41:e3:f7:c4:02:24:59:9d:fa:03:
f0:66:0f:d6:6b:8c:08:ce:47:80:8f:42:e4:c7:6c:af:c3:a3:
17:51:29:ad:ac:e9:f6:b2:5d:8e:3f:a3:85:69:6f:52:ef:0f:
12:82:81:43:0f:b7:73:bb:d2:70:f8:ab:a1:b8:bf:9d:50:30:
36:59:79:08:69:2d:79:a6:b3:8c:bc:fd:99:0c:c2:3b:77:42:
ea:3b:98:d4:47:37:4f:7a:4a:0b:71:a0:d0:d9:f3:5c:38:b0:
d0:b7:c0:c3:99:27:d8:40:ff:79:c4:48:19:59:de:87:c7:c8:
a1:82:a9:24:c0:b4:ba:9d:29:e7:f8:d3:4d:35:b3:26:5e:d7:
59:b2:5a:46:8e:a1:29:7d:e9:67:87:3c:10:c1:23:a9:48:20:
86:c6:dc:2e:34:e9:f5:3e:cb:03:13:bc:a5:36:99:b5:26:07:
f5:ee:2e:18:01:ca:94:c2:b3:c9:96:ea:00:5d:32:40:23:25:
e2:6a:df:c9:09:68:76:26:a4:e0:08:dc:e5:00:dd:f2:cc:14:
6f:41:ed:01:94:50:12:e5:b6:85:26:bc:27:e3:07:54:62:38:
33:2f:48:52:ec:3d:e1:48:3c:30:92:92:e1:71:52:d2:9e:39:
08:22:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:55 2025 by rpki-client