Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: Cq4YgSiSdynhGE441Aqz8U487VG1aqRt3fEPAsLf/q0=
Subject key identifier: 2D:8E:BD:23:14:0B:44:3D:DE:7D:FE:8B:9D:8F:F9:74:6D:70:EF:27
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01976929B4E7AEA57306E43869D846DD05B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0D98
Signing time: Fri 13 Jun 2025 12:00:30 +0000
Manifest this update: Fri 13 Jun 2025 12:00:30 +0000
Manifest next update: Sat 14 Jun 2025 12:00:30 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: /7fLA9Fn2jxuIavvWNMAkI59+rZSR/TShNExTyI/RiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:b4:e7:ae:a5:73:06:e4:38:69:d8:46:dd:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jun 13 12:00:30 2025 GMT
Not After : Jun 14 12:00:30 2025 GMT
Subject: CN=2d8ebd23140b443dde7dfe8b9d8ff9746d70ef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:55:f8:57:50:3b:44:74:b6:b5:b0:58:d5:
2f:ee:7a:12:3e:7d:28:18:e2:f2:71:1b:87:64:ea:
1a:67:a5:43:48:fb:58:a3:6e:bf:e0:6c:ac:6c:06:
03:05:e6:cb:10:45:9e:37:93:8c:19:de:2b:62:5b:
35:c4:f8:a3:20:80:05:ff:97:e6:1c:a1:8a:f7:13:
00:07:6e:c5:04:56:8d:46:54:b8:13:81:86:07:df:
25:f7:e5:13:9e:18:5a:d8:3e:90:c6:c7:f9:18:ba:
df:9e:05:85:81:f4:8d:5f:c3:8c:e2:5e:75:b1:30:
9f:b2:db:94:be:33:5f:65:77:8d:ca:6f:dc:e7:42:
13:be:7b:1d:64:2e:75:5a:56:4f:57:58:47:72:28:
3d:65:8a:79:94:4d:29:6d:5e:4e:22:d8:0d:e7:2c:
e9:66:7c:58:fe:04:37:35:05:23:39:d2:f4:f8:0c:
b9:98:63:ee:64:9a:60:4f:19:db:80:7c:21:cb:47:
3f:77:a9:83:2f:43:76:6d:14:40:22:95:96:04:c8:
e2:76:8c:dd:a8:14:94:51:52:f6:92:87:09:38:b3:
71:7c:b6:c3:a2:bc:51:b0:92:13:5c:08:a8:d5:8f:
f9:b2:6e:8b:84:86:81:57:0c:ba:03:fa:f9:92:5c:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:BD:23:14:0B:44:3D:DE:7D:FE:8B:9D:8F:F9:74:6D:70:EF:27
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d4:c5:d4:c1:a9:d7:07:4c:fc:bb:be:63:2a:be:95:06:ed:
64:d3:15:7a:0b:d4:0e:26:73:ca:b4:d2:3a:a7:c1:99:a4:75:
83:1e:0a:52:08:5d:4e:b3:71:0c:b4:fd:7a:b6:73:fc:eb:e9:
fb:a9:f0:b4:b3:d5:ee:4e:fa:1e:fe:93:9b:cd:b0:4b:37:6c:
4f:b7:6d:7d:f4:6f:a4:fa:10:58:d3:af:8d:f3:7e:37:16:32:
0b:5b:51:83:5c:9a:bb:e6:ae:cc:51:c9:c4:f4:6d:eb:39:44:
12:3a:f6:b7:85:ec:62:35:47:33:53:06:bf:66:87:70:aa:b8:
bb:0a:fe:36:64:b5:ce:d9:f6:9b:d5:0c:81:98:6d:8d:e7:d3:
c3:45:78:f1:2f:26:92:12:5e:13:ae:05:19:42:d5:e7:d0:d6:
36:fb:87:ae:98:f5:c2:d9:43:14:26:0b:44:d9:bd:e0:03:54:
32:c4:65:9a:79:4a:92:fe:e1:3c:8f:b1:ad:4e:eb:d1:14:08:
49:7a:a2:ae:8b:90:3a:e7:22:91:7e:e5:85:60:77:9e:dc:ee:
89:e8:b4:01:25:87:b1:3d:be:cf:a7:13:85:fe:ca:62:bb:7e:
5f:70:09:4b:78:31:74:2a:0e:9d:0b:21:ff:0b:eb:c2:48:a5:
d7:22:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:57 2025 by rpki-client