Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: NxgKL6CQW/Q3sQJ18IeVriSqV8vo3BgVFDvCsRTDL8M=
Subject key identifier: 81:8E:45:4D:82:98:93:1F:8B:27:37:C2:F1:3B:08:A8:B1:3E:0C:60
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 0197854632E574B667DBFEB0A34C0FA4241D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 23:00:59 +0000
Manifest this update: Wed 18 Jun 2025 23:00:59 +0000
Manifest next update: Thu 19 Jun 2025 23:00:59 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: 3xQP5Ju1rVerZvO7vgzM3SlE6YOAWlj3dL6V6KIkzlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:46:32:e5:74:b6:67:db:fe:b0:a3:4c:0f:a4:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Jun 18 23:00:59 2025 GMT
Not After : Jun 19 23:00:59 2025 GMT
Subject: CN=818e454d8298931f8b2737c2f13b08a8b13e0c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:0f:e3:03:0b:9c:74:01:64:8d:cf:5c:bc:
01:16:04:6b:dd:bc:a7:d5:31:fa:79:2a:c4:03:a6:
6c:08:21:ec:14:d1:d0:90:e9:b1:31:45:7a:f9:83:
b0:d0:97:0f:a1:66:c9:58:5b:e3:cf:10:e1:a5:36:
d5:fc:99:5c:c5:56:3a:5d:f9:18:0e:d0:a6:df:52:
c4:ff:66:8e:eb:1f:50:6c:25:c1:65:c3:e1:ed:3a:
da:68:e3:71:cf:b5:05:c0:fc:9f:cf:4f:b5:e1:1e:
b6:0a:fc:2c:4d:45:89:43:84:5d:63:01:34:81:f6:
62:ab:82:53:d5:88:9e:45:39:56:c8:da:0e:8a:bf:
59:19:ad:33:45:8a:62:ea:83:51:ac:fc:00:6a:69:
68:a3:f5:35:7e:9f:8a:53:f6:c6:52:c4:0e:3f:3f:
54:4e:c0:b0:bc:c0:bf:fe:8b:9e:f9:75:cb:02:29:
f6:78:de:da:1d:1e:71:cd:60:07:7e:99:39:b4:06:
5b:d9:6a:54:f3:6d:58:a5:59:12:87:33:4c:06:b5:
4b:59:f6:13:4a:7f:55:9e:fc:9c:c7:52:a3:df:6a:
98:fc:cb:07:d0:99:1f:8f:f9:dc:b7:bd:90:7a:e5:
5f:62:da:cd:af:9b:ba:63:a9:9e:6c:6f:ab:a5:73:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:45:4D:82:98:93:1F:8B:27:37:C2:F1:3B:08:A8:B1:3E:0C:60
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:31:34:de:72:25:a5:d0:37:63:73:c1:91:9b:4a:03:de:
a6:66:45:38:79:10:b4:e6:7c:d9:70:bf:63:09:08:28:f4:c9:
ec:a7:21:aa:9b:e7:19:a0:42:d7:1b:98:69:8f:64:9e:b0:0e:
a9:64:1a:27:18:74:cf:4e:a9:ae:4b:38:22:83:49:19:f1:d9:
67:84:54:6b:3c:8f:32:9c:28:b1:27:78:71:aa:68:0a:2d:87:
a0:f2:80:20:1c:74:db:4a:dd:d3:50:53:20:8b:0a:96:73:cb:
99:b9:10:a4:3e:5d:97:31:f0:8a:ce:f2:a6:3e:76:5c:bc:b7:
bd:51:9f:47:51:7b:c1:ed:d0:a8:24:0f:ae:24:4a:92:74:23:
d9:39:0c:86:8a:d2:cf:55:b6:e1:7c:f0:8a:3b:16:1e:08:ee:
95:e8:ac:73:48:ea:44:a4:a9:49:bb:65:ae:04:0a:23:e4:b6:
aa:e4:a7:15:c6:30:c5:5a:b2:47:32:44:9c:2c:10:c9:d5:6c:
ec:f7:5b:07:fe:38:b9:af:cb:12:cf:7c:02:3c:9b:62:ff:65:
69:bd:29:f7:47:df:79:f8:a9:33:4c:c9:75:a4:83:20:45:f9:
39:51:a9:1d:69:53:f1:35:d2:55:6c:a1:c8:b4:32:dd:0c:36:
30:cb:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:41:16 2025 by rpki-client