Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: /S3SD4qwYqodLLkwJnxbpJE6I8n0IXRdYqic9Z4N/tY=
Subject key identifier: 81:8C:33:1F:7D:82:A0:2B:C9:4F:0A:1E:CF:4E:A1:24:1A:AF:16:32
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0198737464CC0C8F87C2C080D340CA33284F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0C94
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: VCtEheE7ui4aq6f21sq9Sd/nPjp0Rwf8pM8rRWjaxIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:64:cc:0c:8f:87:c2:c0:80:d3:40:ca:33:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=818c331f7d82a02bc94f0a1ecf4ea1241aaf1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:a3:30:80:e8:2b:9f:29:bf:86:eb:70:4f:
a9:14:db:14:d2:b4:4a:82:ff:78:0a:0b:be:40:07:
c6:6b:0c:57:41:48:5b:75:b1:79:e4:c0:96:a4:56:
e2:ed:db:8a:e7:4f:88:32:60:02:51:51:39:26:fc:
fe:e3:29:d0:0f:26:c5:31:94:63:e5:53:3d:de:b1:
b8:01:66:f1:06:ee:25:c3:50:45:b6:d3:ad:a3:ec:
21:18:16:f9:1c:79:b5:b4:5c:10:14:f9:23:c9:31:
ad:5a:28:18:db:e9:fd:e6:c5:f3:d4:8a:52:c7:59:
e4:c7:f6:f9:80:b0:28:15:cb:b2:e2:d8:d9:33:6a:
d3:41:69:e6:e1:86:b6:dd:4c:80:48:3c:48:3d:66:
46:ac:99:86:15:d1:f9:74:0a:aa:cf:ef:30:2b:ab:
6f:e8:46:18:61:d3:2a:59:19:5f:d0:5e:4e:bb:53:
bf:43:46:54:94:c5:87:d8:9c:44:03:04:35:fb:21:
3c:a2:bb:e3:ea:a3:9d:f1:03:41:d6:a4:32:12:d2:
cd:42:c6:0c:22:23:ca:0d:26:21:00:7c:e7:1b:fe:
ee:7c:e7:a0:7a:e3:66:df:72:ac:ee:2a:0a:f3:4a:
8d:51:48:5f:69:66:06:1d:31:e9:61:3c:24:af:79:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:33:1F:7D:82:A0:2B:C9:4F:0A:1E:CF:4E:A1:24:1A:AF:16:32
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:bb:32:75:83:f9:91:5c:46:b7:75:be:94:3a:90:21:0b:
e2:a1:19:ed:6b:13:26:92:c4:b5:05:3d:be:1c:1c:47:06:10:
23:30:37:ba:76:dd:10:98:23:12:46:4b:92:89:2a:0a:f6:d9:
6a:cc:61:9b:c0:b8:0f:0c:c5:aa:3d:30:c2:96:20:be:fd:04:
dc:b0:31:7e:d8:c6:bc:df:4b:2c:ed:42:2a:d8:ba:1a:ad:c5:
e5:6f:b7:78:fe:a6:2b:7f:a2:9a:c4:95:c2:74:f2:db:eb:0e:
f5:59:81:69:a4:38:20:6f:21:3a:db:83:84:03:cc:51:96:0a:
32:06:ab:04:7f:da:9c:e7:93:d0:f1:a5:ac:36:31:26:0e:d3:
22:62:d6:68:64:7d:ff:31:33:6d:98:ea:26:a5:78:e1:4e:b3:
c6:dd:4e:91:8f:e5:e6:22:f5:66:07:e7:e3:d8:f8:1f:31:c9:
a5:76:84:14:3a:3e:48:ee:cc:47:2e:29:93:d8:90:09:80:d2:
99:cc:a9:82:18:5e:47:7d:d7:77:7b:f6:cf:99:69:f3:9b:f1:
55:50:24:50:91:73:e3:e4:f0:8d:6e:0e:9c:4c:a7:87:13:73:
d1:25:9c:4c:4e:fb:0b:7f:66:5b:6b:5e:61:23:0b:0f:5d:46:
9c:48:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:30 2025 by rpki-client