Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: VaUdDoH5OUKq8/9Air2pDTzbQK7CQNHrvZYq1UdEaas=
Subject key identifier: 95:42:90:7B:FE:6A:06:5C:FE:D2:99:E7:03:37:9B:56:21:F0:60:D2
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 01976CCF91509DAA594FBFC22B052D895D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0CB7
Signing time: Sat 14 Jun 2025 05:00:31 +0000
Manifest this update: Sat 14 Jun 2025 05:00:31 +0000
Manifest next update: Sun 15 Jun 2025 05:00:31 +0000
Files and hashes: 1: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
2: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: lzsDvI5n50xYp1FPfoo13SEaDpDb4oxCppmX2H2RKwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:91:50:9d:aa:59:4f:bf:c2:2b:05:2d:89:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jun 14 05:00:31 2025 GMT
Not After : Jun 15 05:00:31 2025 GMT
Subject: CN=9542907bfe6a065cfed299e703379b5621f060d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:89:e8:a4:e9:e8:68:d4:12:00:6c:80:2a:
23:3b:1f:b4:91:9e:16:10:54:a6:b2:90:cc:a9:a7:
33:3a:8a:7a:a0:4a:21:2a:c9:3d:01:6a:6c:f3:24:
10:89:9c:3e:76:02:68:dc:74:17:5a:d3:2e:25:de:
43:b6:0c:68:4d:51:00:8c:df:7d:c2:9b:23:f6:68:
a1:5e:e6:d5:dc:31:f7:af:80:7f:2c:4f:c5:6a:40:
a2:f0:b5:ed:c1:b7:22:3d:95:2c:fe:40:49:e3:3a:
cf:e0:2e:cb:4f:be:d7:de:52:db:11:f9:37:1a:70:
89:ac:7d:a4:17:2a:ef:1b:e1:28:94:8c:91:75:8f:
f0:2b:55:c0:72:41:30:a0:55:cd:c6:6d:d8:e3:ac:
84:22:37:20:1a:85:55:3b:87:91:ae:d6:69:65:fc:
04:d9:17:3e:0e:8b:a4:03:ad:36:96:c6:98:94:84:
70:2f:30:19:15:74:44:15:13:5a:51:09:dc:bb:2c:
fa:02:62:61:87:6d:47:18:43:d6:2a:a7:b4:92:09:
f8:37:94:6d:20:5a:87:96:f0:a2:7c:6f:ea:44:3c:
6d:80:66:88:85:e3:79:ec:fa:9b:5b:db:4f:15:7e:
2f:b0:89:3f:9f:37:ec:c4:4d:4f:68:b2:2b:5a:e0:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:42:90:7B:FE:6A:06:5C:FE:D2:99:E7:03:37:9B:56:21:F0:60:D2
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f9:82:75:41:00:9d:72:01:8b:bd:50:c3:d6:1c:07:13:69:
93:59:32:74:6f:20:28:d8:7f:27:ab:b8:6b:67:a5:bb:6b:cb:
68:d3:cb:f0:44:01:42:e0:20:71:f8:a4:c2:f5:46:cd:0f:80:
dd:eb:29:3f:53:ba:85:90:35:39:dd:21:b1:63:4c:c1:b0:18:
13:38:21:5c:51:11:1b:3a:ee:e4:c6:ec:08:cd:d4:15:86:1f:
78:f2:e3:8a:f4:7a:23:4e:39:5f:de:3f:31:54:dd:88:ae:0b:
1a:ab:85:c3:66:08:6d:cb:55:48:ec:75:fc:71:82:e9:bd:ec:
5d:0e:b6:8c:ec:6e:39:90:5e:cb:4b:d4:2f:9c:3d:08:a5:04:
4a:a5:93:7f:ab:7d:31:6c:88:0d:95:6e:b2:28:eb:98:35:49:
f5:b6:99:22:3d:85:51:2b:10:3a:a1:30:d5:5e:2e:7e:c0:94:
21:49:10:94:9f:35:61:d5:e1:5c:6a:9a:cc:a5:a6:99:70:e9:
2b:21:d3:2c:4f:48:59:ad:c7:97:a4:39:59:0c:3f:b5:48:2d:
6f:05:d6:4a:8c:93:b8:f0:aa:4e:35:50:b8:d0:64:b6:bb:e6:
10:ba:76:53:9f:c8:aa:78:6c:58:fc:aa:9e:17:ed:8c:85:0c:
ec:17:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:48:24 2025 by rpki-client