Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
File: uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft (raw, json)
Hash identifier: qhpx4nTrth9nv2n5VBCVzlnWQf8xYVs3XGb1C1hrefY=
Subject key identifier: E4:70:67:F2:46:E4:15:68:EC:0E:EE:2B:18:3E:5F:4C:22:84:D9:F2
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 01989FDEC3F4178AA4C0CF543A2A9FE983DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
Manifest number: 0F9B
Signing time: Tue 12 Aug 2025 20:00:33 +0000
Manifest this update: Tue 12 Aug 2025 20:00:33 +0000
Manifest next update: Wed 13 Aug 2025 20:00:33 +0000
Files and hashes: 1: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (hash: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=)
2: uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl (hash: SuGAS+ocYii0HUOIFKk0RhO2/PJjNQQiK9N0Qsu2wLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:c3:f4:17:8a:a4:c0:cf:54:3a:2a:9f:e9:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Aug 12 20:00:33 2025 GMT
Not After : Aug 13 20:00:33 2025 GMT
Subject: CN=e47067f246e41568ec0eee2b183e5f4c2284d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:87:a8:cb:fe:0d:cf:b7:2f:bf:6d:46:34:
c9:f8:2b:bd:46:6a:11:7c:d6:05:01:17:10:70:20:
5b:a0:c0:e1:99:52:f8:35:9f:2e:ba:ac:2c:30:32:
15:9c:48:02:89:37:35:99:bd:8f:ad:08:c0:c5:7d:
5b:ee:fe:1a:4b:1c:bd:12:b3:d2:c4:ab:c3:4c:8e:
67:b2:4b:b0:b0:4c:19:a8:4b:88:8e:5f:2b:69:47:
92:b8:e2:a0:22:ed:3b:a0:4d:95:48:54:e8:7f:54:
c7:55:b9:58:99:78:cb:56:7e:6b:a0:fc:86:45:e2:
ab:20:d7:0e:ba:59:ec:ca:12:10:be:43:0d:b3:b5:
e4:5a:85:cd:40:25:0d:66:63:fb:26:28:f7:82:96:
5d:1e:72:90:1c:7c:b7:fd:2a:f7:fe:ea:34:3e:c7:
2b:46:61:3a:f2:d0:64:8a:82:0d:1f:cf:c7:68:0a:
b5:85:7e:08:5f:b5:ba:d7:0e:4d:de:53:39:04:1d:
30:d5:cc:a8:ee:bc:c6:28:4d:ad:d6:cb:25:93:64:
76:fa:25:76:61:19:b1:54:40:29:c6:00:85:a3:31:
c4:9d:6b:aa:5b:01:ab:43:b1:96:3b:c9:20:d4:16:
d0:52:cc:e6:f8:a1:9c:ef:c9:34:21:67:82:18:75:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:67:F2:46:E4:15:68:EC:0E:EE:2B:18:3E:5F:4C:22:84:D9:F2
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:b5:1c:c3:e9:c8:72:8e:10:4f:d7:5a:ec:0a:d7:ce:74:3a:
64:bb:1d:cc:97:0a:6c:b8:36:fd:62:a4:21:66:59:89:66:61:
d1:7a:44:4a:7a:b7:27:af:97:e0:a0:48:e5:9f:0f:93:6c:d6:
6b:58:78:5c:3d:28:6e:a3:4c:84:d5:a5:bf:e0:00:29:16:e2:
44:0e:02:d2:b1:eb:ad:01:49:4c:cd:f3:9d:78:ed:a9:87:c6:
16:a3:71:fa:d4:a6:5c:bf:ff:29:7c:7b:bf:db:a4:f6:dd:67:
7d:6c:d0:fb:45:23:d5:59:12:ff:b2:82:dd:26:37:54:0e:9c:
f8:40:97:a9:0f:1e:1b:25:31:ce:3e:1d:41:4b:f2:4a:5f:60:
9a:74:c1:23:24:2f:5a:3a:6f:4a:a6:5b:9d:bd:4e:1e:8f:6c:
a6:47:5a:81:a4:4b:87:d3:dc:83:08:8d:97:b7:2b:52:52:40:
0c:d2:ba:80:58:7c:85:30:63:df:a8:c6:78:28:39:44:3d:06:
77:c0:96:de:28:aa:fd:b7:63:60:82:d4:93:e9:c0:94:c3:1e:
fa:d2:29:ec:ef:91:4a:7b:05:6a:a4:26:7f:2b:08:08:31:65:
6a:08:46:ba:4b:6f:64:c8:8f:9c:92:4c:43:4e:b0:37:54:a6:
35:41:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:09 2025 by rpki-client