
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: V/6F+nLaj2OaBMdCz09tSzhtbV8orp0B8DEtDs5XjQE=
Subject key identifier: 56:C8:99:87:80:A7:12:5F:CE:C1:E5:28:D3:55:DE:6E:D3:0E:10:52
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01987D89FDA1E6DDE410C642F185D7424683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 133D
Signing time: Wed 06 Aug 2025 04:00:52 +0000
Manifest this update: Wed 06 Aug 2025 04:00:52 +0000
Manifest next update: Thu 07 Aug 2025 04:00:52 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: +LI4M0E+rlL7pqUtebSvoLvmq6YtaRwdwomSOhMjHoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:fd:a1:e6:dd:e4:10:c6:42:f1:85:d7:42:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Aug 6 04:00:52 2025 GMT
Not After : Aug 7 04:00:52 2025 GMT
Subject: CN=56c8998780a7125fcec1e528d355de6ed30e1052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:a4:d1:3b:bc:c3:3f:c1:f6:9d:de:21:45:
2f:e9:88:da:0b:35:21:59:70:7e:25:6e:f8:bc:00:
72:8c:3d:15:4b:c4:9e:61:58:fa:92:dd:62:58:c4:
0e:c1:11:34:84:53:ef:f6:2e:f8:88:67:25:01:c7:
d4:88:10:d5:04:70:22:bd:f9:f8:2f:34:da:39:59:
6d:8d:18:4c:e2:c1:97:40:75:cd:b0:c1:5f:b1:ca:
6a:4e:e2:98:62:da:51:a2:b3:36:b5:12:48:fe:ea:
d2:aa:a5:52:fe:ef:d8:ab:c3:dc:df:a8:67:3e:38:
0e:f4:08:79:61:32:d1:c2:3a:a5:1b:e3:66:dd:e7:
97:9a:74:63:c6:f2:0d:b8:b6:25:f6:a7:4a:46:10:
af:59:9d:e9:0a:8a:88:1c:aa:47:d1:ac:5e:15:d1:
1a:78:59:ca:bf:26:69:92:66:04:49:dd:58:18:3e:
04:c5:d2:e5:5d:a9:88:ec:cd:2f:f8:14:71:1b:fa:
24:24:50:63:33:d6:f3:a0:bb:9c:bc:0e:80:a0:9d:
34:82:6f:e8:bc:b1:d1:32:be:9e:99:9c:7b:57:a8:
49:df:b6:31:0c:86:7e:11:68:39:96:49:4b:8f:c3:
11:01:a3:9e:a2:db:5c:b5:a9:4f:34:3d:d3:94:5b:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:99:87:80:A7:12:5F:CE:C1:E5:28:D3:55:DE:6E:D3:0E:10:52
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e3:ef:da:2d:6a:f5:15:0f:4c:48:ad:d6:18:48:18:8c:0e:
02:11:23:c5:7c:7a:66:02:8d:18:cf:56:a8:53:ae:93:c1:40:
b2:6c:c9:ff:f8:3b:08:1e:74:b0:d8:f0:e3:36:1e:ec:f9:51:
ba:c3:ae:5e:13:00:51:13:fd:4c:4e:38:7d:b2:94:21:06:07:
2f:89:83:4f:c3:a0:db:ce:f4:2e:3e:97:b7:b4:7d:9e:8e:f6:
6f:0d:cf:e8:8b:66:b5:91:af:85:1a:91:dc:f9:2d:65:06:6c:
7e:90:59:ac:5d:fe:9f:b1:5c:e6:f8:2d:2e:69:68:7e:53:56:
7a:24:22:9a:4e:52:b2:7f:7c:4b:fe:69:ed:8b:0d:a6:35:a7:
1f:a3:96:21:19:16:e6:a0:44:34:c1:cd:36:1e:57:4b:a4:9e:
a9:0a:38:e3:b5:69:ea:c9:1c:11:da:2a:6d:7a:ad:6a:78:a3:
7c:38:39:32:bb:e7:05:33:21:64:12:a8:29:39:fc:f5:67:22:
34:31:c1:1d:8b:2b:04:ff:d7:6a:b8:a5:6a:3a:56:8a:f5:7f:
3a:02:34:4c:05:c0:e0:9a:be:ea:84:5d:d9:cb:5e:17:47:6d:
8e:00:bc:2b:2c:1b:0a:4c:e7:8f:d8:5b:26:25:e3:b1:26:2a:
c3:b9:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:29 2025 by rpki-client