Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: n5TdNtY9CDOuS2m+CkDBBfrWt6rnkCs1Jwvk7obB38U=
Subject key identifier: F9:33:07:F0:5D:4F:5A:EC:81:3B:7A:4D:13:A9:9F:1F:5D:F5:6B:CC
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019896A53DFC5578CEE6A94604305F0B7217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 01:01:08 +0000
Manifest this update: Mon 11 Aug 2025 01:01:08 +0000
Manifest next update: Tue 12 Aug 2025 01:01:08 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: 78ePqCkSI6F5skDup8UIxQDFXeN3VsOVDBMIU6p9KeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:3d:fc:55:78:ce:e6:a9:46:04:30:5f:0b:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Aug 11 01:01:08 2025 GMT
Not After : Aug 12 01:01:08 2025 GMT
Subject: CN=f93307f05d4f5aec813b7a4d13a99f1f5df56bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:6e:08:51:a7:60:48:d1:58:f2:2e:8c:58:
26:5b:a9:3c:99:61:d4:c2:c2:d4:ed:7b:27:54:46:
42:ef:7e:06:b9:a9:bf:c3:ce:00:56:99:c4:27:65:
46:69:32:a9:38:c3:ce:58:51:95:b3:04:58:2a:4d:
6c:3b:7a:01:46:06:d3:e0:9d:8d:fd:d6:04:f9:c0:
eb:50:5e:51:b6:f2:ea:80:a7:1b:27:8b:66:d1:8a:
31:61:1f:7b:6e:8c:1d:1c:e8:5e:59:be:b0:02:06:
39:9e:04:81:c0:d1:af:ae:4f:76:f5:ed:1a:88:3b:
5d:0a:bf:7b:7d:93:9d:7e:66:0f:64:64:c7:e1:13:
2a:a0:82:a2:ee:a4:38:a9:84:d7:bd:9a:d2:ba:5b:
6b:ba:92:a0:c9:53:87:1f:d8:a8:4d:7b:59:74:b7:
7a:e2:e0:58:12:b2:aa:b6:45:f1:d0:ae:f3:a1:05:
24:5b:b5:ab:93:b3:56:65:9c:76:20:82:3d:ca:8b:
95:66:40:7b:59:c0:74:a8:00:e6:52:54:80:7c:5a:
63:c2:41:48:89:d1:a2:00:ed:42:e5:98:36:90:31:
5a:35:a7:58:31:c4:c0:d9:3e:76:ef:4f:00:41:94:
8a:8d:56:5a:68:6a:3a:71:57:dc:1a:a7:80:2b:6f:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:07:F0:5D:4F:5A:EC:81:3B:7A:4D:13:A9:9F:1F:5D:F5:6B:CC
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:92:27:a5:64:96:aa:2b:0a:1d:44:6d:9c:28:1e:17:e1:
b8:58:11:2d:3c:d0:08:bd:9f:91:86:5b:4e:3e:fd:0a:26:52:
78:fc:52:73:42:e9:b8:92:4a:49:77:ac:51:8e:c2:19:1e:1e:
28:7b:0f:68:ba:6e:2d:fd:05:ac:a8:89:4b:70:b4:a7:7f:45:
60:49:74:b3:50:ca:63:61:5c:00:5c:8a:e9:15:0c:64:91:ad:
14:43:d5:7f:70:30:76:fb:d9:ae:65:9a:3f:9b:2b:a0:97:35:
8c:b2:49:2b:87:da:0d:bb:2a:ac:b6:fe:07:6f:67:e1:01:29:
e7:c4:40:2b:2b:6d:5c:23:9f:65:81:98:38:10:2b:92:c5:75:
0c:f9:6b:a7:58:75:e6:b6:28:fa:74:9d:78:f6:25:1b:c7:60:
73:1d:51:7b:d2:ae:60:d9:e0:b4:df:d5:8c:a5:17:d1:3f:5a:
39:34:4d:a5:5b:3a:4e:92:f3:04:3c:17:4b:ba:56:1a:1c:5d:
2e:a8:bd:73:26:20:8e:69:01:fd:13:75:1b:a0:47:88:c5:ac:
1f:f6:25:01:7e:c2:4d:ac:27:ca:89:81:2e:9d:5e:da:11:c1:
b2:78:f5:5c:cd:c0:f9:0e:5a:aa:3d:06:f6:f5:31:f7:d6:2f:
d1:1f:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:53 2025 by rpki-client