Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: TBI9eTi4KNJxvIbkmSPoVUGHKZydHpCfRrqJjJa7Cdc=
Subject key identifier: 6A:E3:ED:46:E0:E3:95:44:1F:E6:29:27:0E:46:37:2F:A3:97:0F:CA
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 019873E1DE312307E2731CE8D7037D7CCB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0E22
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: +ALgIYczTe/4r4qN/nRz/VEwNC/70bUAgJwvBa12gWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:de:31:23:07:e2:73:1c:e8:d7:03:7d:7c:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=6ae3ed46e0e395441fe629270e46372fa3970fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:9f:d4:84:a3:1e:6c:e1:1b:7b:30:65:9a:
ad:6c:2c:4d:28:4b:56:64:bd:d4:3a:6e:e2:54:08:
fc:ab:a4:7f:97:47:80:38:90:16:e6:b4:d1:41:22:
df:91:64:f4:96:d7:ea:3b:2a:d7:e9:b7:a1:19:92:
35:3e:f6:eb:0d:49:8d:1a:fc:06:77:97:6b:45:72:
e0:6b:36:8e:f4:5d:25:f6:f2:96:d6:af:09:e9:c9:
14:08:60:9f:3b:cc:ff:f6:c3:76:c3:4a:11:72:bc:
43:d8:24:aa:52:51:f1:ff:08:ed:fd:c3:bc:e8:25:
ff:6a:82:3f:a6:3b:d2:9a:8b:b6:2e:d5:11:c3:e0:
9b:d3:bc:c8:67:8c:0f:0e:ba:dd:59:e0:7c:c8:06:
66:19:c3:28:cc:90:bb:d7:c5:f8:29:c2:59:ec:2f:
0d:2f:ed:46:db:24:64:9e:1f:f2:97:f8:d5:7d:27:
56:f7:d6:a4:70:ad:2f:18:fe:04:8b:29:0b:c9:f1:
96:6c:32:0d:32:b6:79:d6:5f:6c:48:9b:52:96:31:
8d:2d:43:b3:70:72:ff:a7:6b:52:e9:ad:cc:63:ef:
38:e0:dd:8e:1d:91:a1:6d:2b:de:a0:cb:a4:95:2f:
db:b8:9c:0e:ca:f9:37:72:d1:2b:2f:09:6b:03:3c:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:ED:46:E0:E3:95:44:1F:E6:29:27:0E:46:37:2F:A3:97:0F:CA
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:7b:92:d8:7c:f6:c8:91:56:e9:2f:60:45:16:03:c1:b0:
29:ff:ae:0a:2b:e4:cd:17:3d:7c:77:69:a8:c7:87:b1:e6:57:
30:9e:55:e1:46:08:25:7a:31:69:ed:c5:e4:9b:45:a3:0b:e5:
b2:34:e0:9c:72:24:97:0f:c4:8f:c7:1e:6c:ea:42:07:6f:bb:
ec:4a:95:62:10:96:43:0c:dd:97:5f:9a:93:f1:b9:4e:2d:dd:
cd:49:1e:8e:5b:5b:b1:ef:1e:54:81:82:85:bc:fb:0e:4a:ad:
c0:5f:08:2e:ea:34:00:35:cf:5c:b2:48:f5:be:99:cd:9e:09:
d1:86:ff:89:a3:e4:30:17:cb:fe:28:fa:07:1b:db:89:16:f5:
6b:d5:c9:bf:45:e0:46:a1:ad:63:d0:96:4e:91:7e:1c:3e:95:
7a:69:2f:22:77:0a:64:a6:2c:ad:68:f6:ce:67:c5:68:eb:e4:
ac:84:ee:37:c2:96:c3:49:3b:a7:2d:60:57:66:5e:32:c1:a7:
7f:cd:0b:c9:65:2e:51:98:51:52:3b:bb:60:0a:54:70:3c:6d:
f8:87:67:66:73:45:be:07:24:e4:b6:1e:12:70:cf:41:18:6f:
8c:99:4c:fc:ee:31:f4:ec:7b:37:46:8b:ac:9d:b6:08:23:3f:
b7:75:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:07 2025 by rpki-client