Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: zdl1qnRU6PkpW6Mv1Z15UEDl+Yn8SbKet92XHkI9i6I=
Subject key identifier: A1:CF:6C:16:38:FC:06:C1:E1:81:C3:EE:77:E3:DD:4B:79:05:DD:91
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 01976B85FD8079F0C4DB2AC4AF5259C919FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 09A7
Signing time: Fri 13 Jun 2025 23:00:32 +0000
Manifest this update: Fri 13 Jun 2025 23:00:32 +0000
Manifest next update: Sat 14 Jun 2025 23:00:32 +0000
Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: ttgmztcF3F2hKYS+AsaRn+iRv6ZKDIXKZv8q3KKqUS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:fd:80:79:f0:c4:db:2a:c4:af:52:59:c9:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Jun 13 23:00:32 2025 GMT
Not After : Jun 14 23:00:32 2025 GMT
Subject: CN=a1cf6c1638fc06c1e181c3ee77e3dd4b7905dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:1c:0b:83:f8:1f:d1:81:9d:de:3d:ad:a4:
97:58:ab:f8:11:81:39:49:a5:69:d8:d6:69:c0:c6:
8a:c8:03:26:cd:5e:fe:17:89:9b:dd:ff:81:d9:d5:
9b:9f:89:6f:01:75:d8:c5:ba:ce:41:bc:49:28:60:
d0:f6:38:06:4c:1d:b2:d6:50:a8:ec:ed:ab:d4:bb:
d0:94:91:82:36:e9:58:c4:5e:e8:07:fd:f2:dd:87:
b5:8b:40:5a:ac:73:82:ca:8d:04:31:1e:d2:6b:b2:
1b:8e:d8:33:1f:47:44:4f:5d:38:eb:9e:9f:50:46:
b9:a2:d6:f4:2c:1d:60:1a:2f:1b:30:30:a9:12:d5:
2e:72:2d:a5:55:cb:68:f2:60:c4:c7:8a:80:d8:db:
d8:18:a8:ea:ab:2d:af:29:01:08:9f:ea:7c:be:be:
6a:88:0f:9d:b8:01:59:bb:de:57:0a:cf:5c:af:05:
8e:25:e8:9d:24:9d:d8:6a:8f:86:5b:2d:5c:c0:c0:
48:91:49:7b:c7:52:d4:50:57:7a:00:8d:6b:7e:85:
57:23:b2:d2:23:bc:0a:11:97:5f:cf:28:f9:b0:ea:
ba:ec:52:e2:74:27:08:90:fe:59:4b:58:aa:4a:b2:
b1:d4:61:c2:32:4e:bd:93:b4:ad:68:81:50:8a:d5:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:6C:16:38:FC:06:C1:E1:81:C3:EE:77:E3:DD:4B:79:05:DD:91
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:14:67:73:2b:b2:3c:86:17:03:c5:0b:c7:14:95:50:3a:73:
93:4a:8a:32:fc:b3:60:e5:f7:5e:da:db:94:14:e2:94:58:b2:
b5:e7:10:70:49:73:68:1d:cb:f2:42:3f:76:1e:b0:4a:f7:b1:
fe:6b:f0:7d:e4:cb:22:33:f1:a4:d1:31:f5:86:b8:51:53:19:
c8:5b:60:53:ed:a1:75:8b:dc:a0:ed:b9:0c:0d:a5:6f:6d:0e:
02:6c:9b:04:e3:3c:bc:69:ca:45:6b:aa:51:3b:fd:91:53:7b:
8f:46:3e:b6:25:e3:52:5c:95:48:24:55:73:ae:1b:48:44:18:
fe:bc:04:d9:8b:7e:10:d4:f5:57:d5:0a:53:98:60:59:df:8d:
ec:44:cb:8e:40:49:97:f8:e9:b4:fd:03:42:18:c5:02:fd:fb:
6f:97:e9:99:1d:55:8f:a6:28:58:7d:c0:56:95:ce:73:1b:c2:
a4:d1:f3:40:10:90:7a:e5:a1:2c:c1:c3:48:a5:1d:0e:4f:db:
72:26:19:81:5d:65:28:51:f2:e5:c4:8d:ec:34:46:70:bc:d8:
e2:e6:c5:a9:67:41:b3:e1:bf:d2:68:28:3f:0f:0a:ba:d0:b6:
33:46:d3:eb:4f:06:36:0f:8e:52:ed:e5:fc:8b:55:44:95:f8:
98:b6:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:29 2025 by rpki-client