Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: HvCFEYvyhBzxeevc3MKbRL3ZrCiPW3bVluCWc8vk51s=
Subject key identifier: 76:A2:74:36:1A:F6:08:4A:4E:38:C0:7D:16:C5:F7:DC:81:37:32:DA
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 01988E0FA24A3EECEF81053B4E093D845154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 09:00:45 +0000
Manifest this update: Sat 09 Aug 2025 09:00:45 +0000
Manifest next update: Sun 10 Aug 2025 09:00:45 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: pSnpPYAub/FZ307VUfZTnfHQzHsP1Bd5WNRUKHK7FZ4=)
2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:a2:4a:3e:ec:ef:81:05:3b:4e:09:3d:84:51:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Aug 9 09:00:45 2025 GMT
Not After : Aug 10 09:00:45 2025 GMT
Subject: CN=76a274361af6084a4e38c07d16c5f7dc813732da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:2b:40:d2:3a:17:d2:66:a0:77:7c:4b:0c:
be:3f:12:54:71:7b:4e:aa:17:71:65:a4:f0:8a:42:
56:51:f3:bc:be:bf:0d:dd:55:7e:55:44:0c:bf:a0:
d9:da:5b:16:c2:14:03:5a:dd:71:74:b0:2b:5f:3a:
18:c1:3c:89:5b:9c:6c:22:a7:0e:e9:38:b1:89:4d:
01:3f:12:86:4b:43:28:ca:1d:9f:e6:ee:29:5e:7d:
90:15:f2:65:2f:65:d4:81:f6:9a:e3:ab:46:d0:43:
b4:42:60:fb:c6:be:9d:3e:1f:77:55:55:65:48:85:
19:69:7d:21:a6:e6:20:28:67:07:c6:63:44:f4:b5:
39:cf:09:9e:21:db:65:f0:29:49:e8:d1:81:8d:3e:
e3:7a:f1:2a:b8:f0:dd:65:63:2b:24:42:80:01:b8:
44:5a:1b:69:18:2f:fd:79:a3:89:fa:db:e2:5c:7b:
cd:52:28:9c:5c:69:7d:77:98:58:4b:48:86:27:26:
ee:67:61:f3:bf:6e:28:c1:e0:31:a0:bf:1a:fc:58:
3f:6c:f7:8e:4f:4c:b0:f7:97:d8:f5:57:cd:38:88:
b4:8e:ad:89:06:30:9e:b6:d0:a2:5c:91:3d:19:c6:
1e:eb:f9:73:f3:d0:85:e4:91:56:d2:29:a5:f4:23:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:74:36:1A:F6:08:4A:4E:38:C0:7D:16:C5:F7:DC:81:37:32:DA
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5c:68:22:b7:4f:c9:2c:b3:19:8f:4e:01:88:01:6e:65:00:
85:dd:9b:d9:f8:18:a0:99:7e:20:f4:e7:ce:27:c0:1b:41:52:
b4:5a:36:94:a0:58:37:c7:cc:4a:38:5c:a9:32:df:bf:23:4f:
63:0e:74:d0:e6:9f:90:8e:aa:da:99:e7:61:1b:10:ae:df:9f:
6f:ab:55:81:0e:66:d3:05:b2:e7:ee:20:95:c9:5d:d0:99:ab:
6d:e6:ad:e2:eb:a3:86:32:d1:00:57:a1:50:36:14:f9:f7:db:
4e:04:f8:5e:e9:98:6f:50:81:68:46:35:ce:67:12:87:fb:ad:
15:8b:20:6d:bd:2d:63:04:c4:34:37:39:3a:2e:a6:d0:b1:54:
7b:1e:1c:d9:14:aa:5d:7e:dc:c6:9b:eb:74:41:cf:de:45:b8:
6f:5d:2a:be:ff:b3:f5:b2:be:8d:72:12:39:f0:aa:0d:4d:98:
1e:70:2e:1f:2c:60:9f:2a:37:28:01:55:a9:5e:9a:9c:ba:13:
ae:7a:e8:9b:68:45:64:6f:b8:a3:58:a5:d8:7c:06:bb:b5:8e:
0e:87:e7:46:84:b9:c7:b3:26:81:55:29:57:4d:a0:6a:5b:cf:
cc:d7:4b:08:f4:0c:e4:af:6d:b2:fb:43:b9:c7:a4:ac:91:1e:
14:dd:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:09 2025 by rpki-client