Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: EXnTx9QiypmlljjpiDSf3k5n4/s+vihGaVn9Zw7Jor4=
Subject key identifier: 92:59:48:44:1E:2A:02:B8:70:A9:FF:94:35:11:22:58:34:67:83:93
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01988D33BD7055FE9B460C02A93FDDA0D492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 05:00:34 +0000
Manifest this update: Sat 09 Aug 2025 05:00:34 +0000
Manifest next update: Sun 10 Aug 2025 05:00:34 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 6IGsdJzhfgt/38/bX7k1JtF8NF2siCpUCSw63ca0k9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:bd:70:55:fe:9b:46:0c:02:a9:3f:dd:a0:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Aug 9 05:00:34 2025 GMT
Not After : Aug 10 05:00:34 2025 GMT
Subject: CN=925948441e2a02b870a9ff943511225834678393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:c3:10:9e:e6:93:8e:de:b2:23:92:55:55:
43:a0:a3:a8:6f:5a:fd:f9:59:ea:9c:bc:cc:0b:db:
a5:58:59:d9:ab:3e:5d:8f:6c:2a:85:96:6f:87:16:
c0:4c:7c:ad:c8:05:94:96:82:76:5c:71:b8:d6:cf:
f8:58:20:ef:c3:21:5c:98:87:0f:b4:45:66:e4:03:
81:b6:f2:3f:ad:3a:c9:de:85:e0:81:53:fe:54:8d:
ac:cc:df:2a:af:0b:ab:34:74:27:33:63:fd:8b:73:
8d:c5:06:b9:05:c4:e5:6d:28:60:a8:3e:02:53:86:
88:9c:70:b1:2a:32:b7:e0:4f:47:c8:8a:2b:8c:56:
11:4f:e0:d6:db:b2:c9:b7:fc:da:6c:ac:c7:eb:60:
b7:52:de:d3:39:c3:5e:d8:6a:d4:1f:05:7b:df:c0:
fc:c8:cc:55:f4:0d:24:b6:bb:1b:85:18:e4:05:ca:
6d:7e:89:96:70:a0:1e:20:5e:81:80:2d:95:75:3d:
e5:a7:e0:20:20:76:92:7a:11:48:c0:3a:d8:e9:b6:
a0:90:f2:0b:e9:f2:54:7e:92:be:87:9b:5c:9e:e9:
aa:97:f5:3f:f6:fb:9e:c3:53:49:c4:4d:a1:c6:ce:
59:81:a0:b5:b9:14:6b:98:95:a1:85:41:9a:b4:96:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:48:44:1E:2A:02:B8:70:A9:FF:94:35:11:22:58:34:67:83:93
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:25:fa:bd:9e:fb:f5:30:f9:18:22:62:b1:32:cb:a8:ae:8e:
40:3c:37:c0:b2:69:47:15:1e:51:e7:f4:ac:95:c8:92:46:e2:
69:44:56:85:db:72:89:53:d9:e2:91:8b:21:23:c5:25:b3:d0:
6e:e3:8e:14:20:55:f7:2a:95:8e:0a:34:91:4a:63:3c:70:3f:
0a:72:02:8c:47:64:20:63:3a:60:81:01:64:25:fb:f8:6c:d3:
c1:f7:36:8f:01:e2:fa:a5:b4:f9:36:27:da:3b:e3:07:67:ce:
74:86:e5:1a:95:6c:7a:16:56:3c:84:d0:27:9c:27:a2:43:67:
e7:be:ff:eb:f2:f9:b7:34:a9:be:a3:21:80:d4:89:de:63:68:
e3:19:7a:24:b2:b1:85:cc:25:08:cf:83:b2:1f:d3:a4:03:5d:
82:6e:b5:88:85:e2:b9:7a:e9:7f:9e:2b:2f:6a:eb:51:63:ab:
a3:cf:e6:c8:2e:7e:eb:97:62:c3:e8:ac:e5:98:1c:b2:f9:93:
4a:47:6f:1d:33:42:4c:40:09:ee:4f:91:ac:69:6f:f7:1e:29:
e9:9a:d8:ae:b2:d6:8c:f7:cd:91:ae:0d:03:aa:0d:40:bc:82:
70:67:40:b3:d2:2b:99:ed:eb:1b:c5:c4:2b:2f:d5:13:e6:c3:
bb:60:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:50 2025 by rpki-client