Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: hO+IsMatJ+JU7OP8MNIvMqAfnEfuWzelXGHq61lH3tE=
Subject key identifier: 76:18:A3:28:66:34:DE:B5:D1:56:03:0B:6A:07:41:EA:17:74:EA:F1
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01976D748D35F99CDD99AB1797C5553F5602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 08:00:44 +0000
Manifest this update: Sat 14 Jun 2025 08:00:44 +0000
Manifest next update: Sun 15 Jun 2025 08:00:44 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: XP9c9GpWvVheZCY/KnFIRipTBQ+sTa/X/KXgapjSr9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8d:35:f9:9c:dd:99:ab:17:97:c5:55:3f:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jun 14 08:00:44 2025 GMT
Not After : Jun 15 08:00:44 2025 GMT
Subject: CN=7618a3286634deb5d156030b6a0741ea1774eaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:13:d7:58:db:a9:33:d9:e8:c5:8d:24:12:
84:40:36:75:ca:6d:27:32:6d:7a:a7:a5:f8:99:61:
78:49:70:18:5b:a4:82:f4:b7:f4:f5:2a:ce:3d:73:
8c:9d:99:33:25:90:94:11:7a:46:8f:c2:be:7d:7a:
ea:cf:19:84:b1:f2:4c:11:02:0c:fd:96:46:ce:37:
4a:23:02:cc:7c:5f:9e:88:38:2a:49:7e:4d:b2:ad:
6e:50:0a:ae:57:36:93:45:c5:5a:4d:69:00:78:7a:
d3:35:b3:80:31:3c:09:fa:48:9a:f3:40:13:f4:05:
ae:02:a4:36:a1:37:74:4c:b2:ad:e8:22:c2:b9:22:
0f:ac:9b:df:f0:79:a9:2a:d2:01:9e:04:78:55:54:
cb:0f:0d:5c:09:f7:ef:c2:37:f4:3c:79:dd:a1:44:
7d:45:81:d1:b4:35:e5:5d:b0:b5:67:9f:6a:57:f3:
d1:11:c4:38:12:ff:34:65:f6:94:d6:84:79:18:0f:
f9:39:08:63:a7:77:cd:05:80:9b:9f:5a:c5:d6:d4:
13:21:ce:b5:59:bc:8c:32:b6:77:23:72:a6:16:08:
88:1b:76:4f:9c:f4:80:d1:db:d7:39:e5:21:f9:be:
bc:09:e4:59:c1:61:3c:12:15:af:c8:77:7f:4d:c5:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:A3:28:66:34:DE:B5:D1:56:03:0B:6A:07:41:EA:17:74:EA:F1
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fd:73:7c:ec:c3:a9:24:5d:df:04:bb:d7:91:3f:c0:60:ee:
cc:c8:46:48:48:c7:8a:ba:40:ff:55:09:1a:3f:7c:d3:5d:a8:
2d:dc:2e:aa:13:27:2c:3f:33:9a:62:4a:fb:0c:28:2b:38:1a:
c0:42:c8:94:da:c9:88:b6:80:1f:2f:8a:af:a5:0f:bd:16:1a:
5c:d1:f9:de:4f:5f:d0:fd:43:3c:81:c3:58:b9:41:47:61:1a:
42:64:06:13:e2:5f:be:89:02:69:37:76:18:b7:9d:38:d9:ad:
34:2c:7e:c8:9c:d6:30:6a:35:f8:cd:6e:89:91:df:53:0f:f0:
c9:21:9f:7f:f7:88:9f:05:7e:ba:e1:64:37:c6:9e:4a:8a:e1:
06:a9:ad:1c:33:de:21:dc:0f:0d:64:a6:6d:3c:5f:35:ed:61:
00:ef:7f:06:71:97:7c:ad:e0:4f:92:e1:bb:db:eb:3d:43:5a:
52:f3:d0:ae:43:83:cc:5a:91:bb:3b:a8:28:ac:9f:e0:6d:47:
e1:7f:dc:d5:a7:b3:10:9f:b0:0d:f8:81:47:46:ae:1a:06:28:
4d:b0:17:1d:8e:e3:64:8f:37:04:30:cd:cf:e6:3c:23:1f:ac:
21:f6:f9:11:f5:b6:bb:6a:8a:c1:41:da:d2:6c:6f:3c:aa:1b:
e8:a9:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:31 2025 by rpki-client