Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
File: uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json)
Hash identifier: voi9fYJMfJyWdS69vFxb7mQ3B+iF3ikwHKpS7ec39XI=
Subject key identifier: 71:23:99:AD:FE:94:FB:33:BA:38:D7:C7:D7:18:DA:67:6F:52:F5:2B
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial: 01976A0595C28966E6B7104DDFB2425BC319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
Manifest number: 12CE
Signing time: Fri 13 Jun 2025 16:00:40 +0000
Manifest this update: Fri 13 Jun 2025 16:00:40 +0000
Manifest next update: Sat 14 Jun 2025 16:00:40 +0000
Files and hashes: 1: UyvA3eS1m0fQ9LmHqohOpGUgOH8.roa (hash: nd0xk/LBWR8Y1uHlUTNuhLFMAeJyMBYmIcQoIT0cSck=)
2: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: b6D+RV36QwVGl6XMwU1RdrRV+oaIA0Wp6gwdWbwME2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:95:c2:89:66:e6:b7:10:4d:df:b2:42:5b:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Validity
Not Before: Jun 13 16:00:40 2025 GMT
Not After : Jun 14 16:00:40 2025 GMT
Subject: CN=712399adfe94fb33ba38d7c7d718da676f52f52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:4e:be:27:e9:2b:56:77:51:f4:a8:2f:07:
a4:5c:fe:40:14:6b:3e:0e:e1:29:57:41:b2:e6:75:
1f:7a:79:90:43:95:ab:e3:ac:ba:5f:b1:0e:f1:af:
35:a1:6b:79:7c:8b:59:ed:8b:e6:15:50:ba:cb:03:
07:d6:43:17:ee:e9:64:7a:6a:d9:46:ee:ab:9e:39:
a0:52:79:af:37:28:d3:32:7c:0a:74:9e:71:5b:11:
49:1e:07:cb:4f:ca:92:c3:8c:d6:8f:9a:4a:66:16:
75:ec:c6:10:04:7a:99:28:57:14:7f:b5:f8:3d:7d:
dc:27:3d:97:94:cf:bf:e0:50:45:3b:88:c4:2c:3e:
b1:6a:6c:bf:84:74:e2:1b:67:cb:1f:e2:a0:c5:6a:
5a:6e:4b:70:c3:2b:0e:e3:59:0b:f7:1c:03:94:05:
d7:98:e0:e1:91:24:1e:2e:42:67:da:a8:59:83:16:
19:68:36:97:ee:8b:b8:ad:b6:63:e2:c2:e6:17:d0:
65:6b:72:ab:6c:17:8f:af:b3:ae:29:58:d9:21:6f:
84:ae:c1:21:bb:62:3a:ce:96:02:14:6d:1f:c4:b1:
dc:d4:cc:00:3d:8b:d2:5a:49:e0:1f:50:60:0a:48:
f8:44:94:87:f7:14:98:22:f0:d0:38:92:2d:cb:35:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:99:AD:FE:94:FB:33:BA:38:D7:C7:D7:18:DA:67:6F:52:F5:2B
X509v3 Authority Key Identifier:
keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:9b:d9:c6:3c:ea:a1:73:67:13:7f:fc:cd:0e:1a:56:c4:
cd:e8:c3:87:96:73:c3:49:a7:7f:4a:9d:47:90:da:a7:9b:05:
5d:9e:43:1c:b0:15:42:7f:d0:07:36:74:c9:87:02:12:5e:94:
b4:ef:fd:95:2d:3d:5e:c7:47:7e:0c:98:ec:64:69:5c:e3:22:
4d:76:b9:5d:5a:79:9e:f1:78:41:36:bb:8b:d8:45:e4:68:17:
6a:7c:52:6c:d4:9b:ed:9d:b5:66:f9:4b:4a:e5:14:89:ae:38:
41:f0:64:c0:fe:5a:13:33:96:2d:ad:04:0d:19:1e:eb:ff:64:
f2:f8:1d:1d:49:ff:c3:8a:8f:98:13:ce:e5:82:36:05:79:34:
ac:87:f0:0f:fa:69:c6:a3:06:33:92:80:27:70:97:83:34:48:
e8:a3:69:8e:8a:39:fc:93:67:d6:29:38:56:e4:9c:56:b3:c7:
8e:28:17:15:31:23:82:4c:53:08:b3:a3:f5:6c:e7:ff:da:ac:
63:4d:70:90:b6:55:96:bb:31:7d:3c:15:b2:61:ac:c9:43:b7:
20:0e:b3:4f:de:bf:92:5a:b9:dd:e1:7e:54:e3:19:6b:9c:05:
29:60:20:d4:54:3d:f8:ca:dd:e9:69:c6:ad:e0:74:22:50:df:
f1:8c:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:45 2025 by rpki-client