Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: sbBFZM24PjvouPovCsckFmDz3+xHttym0Ps6+kM9h6M=
Subject key identifier: 00:C9:D6:0E:9F:30:69:AF:F8:C2:47:82:34:82:B4:AE:68:C3:D6:FE
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 01976D3DFE67A60C6878397FE69534AF4FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 0D8F
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: bar/i2mYrt5/+4QCeAUMpQjgT8yRXKtAf3GDhM4bhcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fe:67:a6:0c:68:78:39:7f:e6:95:34:af:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=00c9d60e9f3069aff8c247823482b4ae68c3d6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:68:25:4e:c3:10:c6:a7:ab:84:01:f4:c1:
f1:47:cc:f9:21:e9:b2:34:fb:ee:e8:8c:dc:d2:94:
b6:7a:28:30:45:9a:08:15:7c:a7:18:a2:d9:68:7d:
72:84:2e:a2:65:03:85:77:fb:e8:d5:f2:c9:d4:72:
6f:97:a3:8a:1f:d4:7c:b0:14:69:0b:94:00:6d:af:
6a:e5:c6:41:ee:00:90:aa:da:1b:75:ff:ec:93:ae:
7a:35:b8:08:be:42:49:93:31:67:6b:10:ba:ef:9d:
f9:88:73:3e:35:62:15:6f:61:ed:01:52:8d:88:5a:
46:85:99:4a:cf:8b:b1:50:5e:eb:04:05:85:66:44:
2a:66:c2:a6:42:29:81:e5:45:9d:c8:74:99:f1:94:
02:d0:2d:c2:1b:2b:2c:bb:0a:66:23:10:a1:1b:fd:
56:40:a5:0b:6e:4e:c8:c0:0e:da:c0:c5:41:2f:66:
24:da:59:4a:03:60:e5:08:61:5b:05:a6:83:3e:ab:
85:d5:b2:7b:3f:d3:75:cd:fa:b0:8d:0d:ab:dd:a4:
76:d2:4e:34:f8:84:cf:e1:5b:07:18:ff:0e:69:ba:
cf:35:ae:a1:62:73:42:49:c6:d1:bd:cc:4a:82:5c:
e5:6b:fe:53:91:4d:ea:fe:da:fd:89:6f:a3:f0:4e:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C9:D6:0E:9F:30:69:AF:F8:C2:47:82:34:82:B4:AE:68:C3:D6:FE
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:09:b5:12:c2:d2:2f:13:d9:60:05:22:79:b3:c6:d8:dd:78:
71:de:d2:2f:37:92:0c:61:b1:e0:0c:6b:50:09:57:75:99:9a:
73:fe:c2:56:97:1d:68:71:01:46:7b:74:8d:f6:77:bc:e4:cc:
46:75:ea:72:90:6a:dc:46:28:9b:b3:29:b2:6a:dd:7e:80:90:
42:be:05:bd:07:30:8a:d0:dc:c2:7d:19:1a:9e:89:85:0f:de:
35:e6:bd:fc:0d:05:8d:a4:ec:fd:ff:77:ec:20:2c:be:f9:3f:
f3:8a:38:1d:b9:60:2b:a2:12:7d:99:18:21:71:40:00:b1:27:
65:fa:d2:8c:fe:f4:3f:5b:eb:74:f8:60:c2:3c:49:cb:34:b5:
f9:b3:93:1c:a6:03:b9:da:25:1f:67:9d:21:c5:62:d0:14:16:
97:ed:6a:5e:44:45:2a:e0:30:85:77:24:02:16:64:d0:30:be:
5c:db:7c:01:ab:54:18:df:9d:5f:41:d8:b9:b5:41:e7:62:0c:
bb:0c:18:8f:b6:a8:c6:17:6d:d5:66:39:23:5e:de:18:be:5d:
19:b2:67:25:ac:1e:ce:37:64:8e:fc:9a:32:32:a4:1e:e4:aa:
ac:bc:b2:e0:5f:25:8d:a3:80:a1:a6:1a:e9:2e:6c:b1:22:8d:
f2:27:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:03 2025 by rpki-client