Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: Jux2W5YiMrzZb2nkm01LmwFloFqTSXLOCIFnq6QxZrc=
Subject key identifier: 1D:96:76:F2:1A:1F:F1:BD:F8:78:1C:5D:9B:FB:40:E5:1E:69:C9:90
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01977D8C2E02CF9BF22C607DA2C3CD88D41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1529
Signing time: Tue 17 Jun 2025 11:00:28 +0000
Manifest this update: Tue 17 Jun 2025 11:00:28 +0000
Manifest next update: Wed 18 Jun 2025 11:00:28 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: I8Ns4xy7g48AZk/qpYmuY81elIcrWRIdFq0o8GWPIzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:2e:02:cf:9b:f2:2c:60:7d:a2:c3:cd:88:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jun 17 11:00:28 2025 GMT
Not After : Jun 18 11:00:28 2025 GMT
Subject: CN=1d9676f21a1ff1bdf8781c5d9bfb40e51e69c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:ab:ae:c7:29:f7:4b:f3:14:9a:3d:d5:f7:
62:1d:8f:2f:79:9c:a1:9f:93:d2:e4:f8:4d:20:31:
01:cb:55:09:7d:45:3a:67:ac:59:29:26:50:4a:d9:
00:5e:d3:38:d4:c9:a2:c7:30:0a:88:77:66:5e:53:
93:88:a6:ac:47:da:29:8a:60:ef:ed:3e:a6:9a:9d:
c7:69:bb:cc:5e:22:6c:a4:d7:8a:dd:45:12:82:d9:
24:79:6e:c1:11:ec:3d:f1:1b:e8:0b:c1:c3:09:25:
8f:85:ef:bf:32:a0:12:26:51:c7:d6:79:29:c9:1c:
d2:d5:74:02:ba:46:94:47:62:62:e5:a4:7b:14:ac:
74:fa:4e:37:7a:ed:1b:cb:ff:8a:5b:17:c5:0b:07:
5d:22:73:c9:3b:90:ad:b1:32:d4:9f:d0:12:e6:2d:
5e:a3:10:2a:15:8d:80:8d:73:ac:54:5c:d1:df:8f:
47:5f:bf:63:8c:6c:14:fd:be:b0:d2:42:9c:cd:86:
0f:1a:f3:df:a8:9c:d9:7d:13:a8:b6:85:08:c8:5a:
0c:80:c9:ff:93:4c:5c:e3:e8:01:7b:e1:e8:75:73:
e6:90:d5:2e:36:c6:db:e6:3f:3c:e8:d7:96:01:d7:
ee:f8:df:dd:3d:3e:1d:8b:60:6f:4c:e3:6f:85:2f:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:76:F2:1A:1F:F1:BD:F8:78:1C:5D:9B:FB:40:E5:1E:69:C9:90
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:a2:a9:97:68:8c:38:4e:40:76:8d:cd:5f:4d:e9:04:2e:
4c:16:f2:7a:aa:8e:1f:1e:ed:06:4f:a2:27:a6:1a:c2:3e:8f:
18:8f:0e:2f:4e:9c:3c:f7:31:09:08:ed:a4:e8:eb:17:84:98:
0a:6a:24:cb:36:0b:05:7c:d0:23:76:b0:d4:b2:80:32:f6:4d:
1d:f8:40:97:e8:70:7c:3b:39:7a:ea:3a:9c:e5:da:70:7d:ab:
47:76:5a:d5:b4:1a:5b:3b:e0:12:db:bb:d4:7c:83:92:6a:eb:
7d:b9:b0:a3:c9:3a:57:91:e8:95:40:0e:5e:2a:c2:40:5d:14:
07:3c:a6:fe:3a:1c:3c:e3:42:a4:c2:e0:c4:2b:72:a6:e6:46:
ee:2f:66:de:6e:15:3c:21:3f:2d:70:bc:15:d7:29:cc:05:7f:
17:ba:46:ff:16:7f:92:e6:a2:47:39:a8:ce:56:16:cd:75:63:
e2:5b:d2:dc:ed:ac:42:57:ce:3b:17:17:93:bf:bb:0a:7b:51:
35:f3:ad:af:fb:91:32:e8:f0:d5:f4:5c:11:7f:97:b7:85:b3:
1f:9e:52:0e:04:74:f8:ca:0d:90:ff:9f:1c:ec:f0:56:5a:47:
c9:be:d9:51:4b:80:ee:49:60:06:55:de:10:c9:62:56:55:6a:
63:b1:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:28:22 2025 by rpki-client