Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: WrkQ4fFYxakzhKjaqIF0ONoVm3CmK17rMRO8wAKVFv8=
Subject key identifier: 6D:7F:AE:19:01:18:6C:4D:4E:D0:96:84:AC:35:56:1B:85:B0:6E:F6
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 01988768B6B9C00EEF731B92368F549A494E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 0678
Signing time: Fri 08 Aug 2025 02:00:43 +0000
Manifest this update: Fri 08 Aug 2025 02:00:43 +0000
Manifest next update: Sat 09 Aug 2025 02:00:43 +0000
Files and hashes: 1: R3B7cvcZfT1UgiKlMGRmSCqelSI.roa (hash: hK53ZwTRULQ2RrBmMhyQ9z9h0bWz1bk+KzcfZK6F3vk=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: CZUImMqbV3h589NBp282WGoLoOHBKh1Ar/r3xm6O9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:68:b6:b9:c0:0e:ef:73:1b:92:36:8f:54:9a:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Aug 8 02:00:43 2025 GMT
Not After : Aug 9 02:00:43 2025 GMT
Subject: CN=6d7fae1901186c4d4ed09684ac35561b85b06ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:bd:e3:2a:98:1c:f3:9e:ed:b8:e8:0b:4e:
c9:a9:13:07:08:09:74:c3:df:05:3e:0d:0c:fb:ae:
e8:3b:87:56:98:05:86:ec:e0:32:26:96:92:02:21:
e0:f4:a1:25:9b:47:29:f1:b4:55:4a:b7:da:f0:57:
a4:49:0b:d6:4b:15:e0:01:a4:ed:0b:c4:5d:74:40:
cf:3d:f6:c7:ee:8b:70:b9:0a:74:d0:ad:b7:a4:1c:
9d:f2:b1:e6:d7:48:05:25:22:9d:c5:82:5a:43:f2:
ac:80:fd:dd:44:b0:2c:e9:bd:ef:cf:a4:cd:98:b9:
f0:22:25:13:cb:93:f1:a0:3d:37:af:cf:da:46:8e:
1c:75:02:6a:5f:3f:07:2b:15:78:2b:25:5e:05:b6:
30:ae:83:bb:de:46:b5:5a:91:72:71:a4:72:b6:13:
bb:c8:35:d0:05:7b:77:57:1b:7b:75:5b:ff:42:57:
3e:e3:3d:af:d8:96:68:18:6d:d1:a2:ce:fc:93:96:
72:7d:27:bd:58:8b:f3:d3:9c:e4:b7:d3:c3:4f:f8:
42:a3:cb:9c:d1:6d:74:8a:cf:26:e7:44:02:64:85:
53:63:97:c4:e3:cf:4a:6a:f8:e7:f7:db:0b:7d:2f:
32:18:be:ed:fa:3d:90:86:a1:40:93:59:e0:a7:aa:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:AE:19:01:18:6C:4D:4E:D0:96:84:AC:35:56:1B:85:B0:6E:F6
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:d3:ac:1f:6f:83:22:47:bb:ef:58:f1:aa:32:d5:bc:4f:
a6:ed:7d:76:dc:51:8d:51:b4:9a:7a:5b:5b:de:c6:31:e1:9a:
ff:8c:87:bb:2b:49:ef:76:f5:ba:2b:ab:5b:7d:df:1d:d3:17:
09:fb:90:bc:49:b7:08:e1:86:e9:12:c3:ac:a3:b9:a8:90:53:
e6:6f:c3:7d:73:53:95:c3:ef:f1:e7:3d:9b:cf:0e:7d:dd:ab:
21:0e:16:41:a0:55:1c:dd:2d:4b:30:67:b9:45:cb:70:24:cc:
1b:45:f5:68:a7:55:c1:31:b2:60:0c:c5:fc:78:19:55:9e:66:
ab:34:ee:95:06:0b:6f:21:3d:6a:63:56:d1:ed:fe:b4:ab:35:
1e:ed:be:cf:b8:6d:3f:25:83:df:ae:44:f7:e0:32:fd:2f:99:
0a:8b:47:ad:28:82:5c:41:55:58:0f:ba:73:cc:4e:85:f4:8d:
f8:fc:51:45:f5:ba:52:5f:ff:7b:48:23:a2:9f:b8:34:bf:56:
b3:8e:3d:2c:7b:41:66:92:56:97:c8:26:fc:eb:4d:af:3f:46:
43:c6:57:4f:36:95:f0:c4:66:9b:b0:73:f0:d6:41:ff:c0:15:
75:32:97:8c:01:2d:6b:25:fc:15:a8:42:d6:6f:68:36:7c:8f:
9c:3f:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:55 2025 by rpki-client