Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: 5SDksCDIdttW/i/aPuGu8lrZP4mevtaL1Yy1Mi9kkp0=
Subject key identifier: 96:BB:3F:AF:C1:E6:BE:5C:8B:92:FA:3C:55:F1:B4:E2:98:7D:53:58
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 01989E957882B5C10035F40D5D52C36BFC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 1168
Signing time: Tue 12 Aug 2025 14:00:52 +0000
Manifest this update: Tue 12 Aug 2025 14:00:52 +0000
Manifest next update: Wed 13 Aug 2025 14:00:52 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: p/38KOVGqKKGC5z6ZPCS0bhU1BGcuUNXsT+nIsVSvWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:78:82:b5:c1:00:35:f4:0d:5d:52:c3:6b:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Aug 12 14:00:52 2025 GMT
Not After : Aug 13 14:00:52 2025 GMT
Subject: CN=96bb3fafc1e6be5c8b92fa3c55f1b4e2987d5358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:53:7e:3a:d5:96:3a:cc:70:8f:19:e7:3d:
ef:90:e4:85:d3:1d:0c:56:a1:d2:05:de:90:a9:09:
e0:df:eb:57:3d:79:5f:97:9a:d6:18:19:71:41:8d:
0a:c4:6e:5f:69:f8:eb:e9:87:ab:04:99:1a:bf:6e:
ef:f4:a8:88:6c:ef:94:4c:e1:3b:d1:e2:27:5c:c4:
4c:00:53:f1:51:39:a9:df:53:61:f4:46:d7:b6:ee:
b3:04:12:84:00:08:05:a3:8e:34:df:3f:52:02:ff:
e3:0b:c8:c7:8d:01:db:51:18:2b:17:86:d4:fd:e3:
fb:49:77:77:c5:8d:a8:6f:64:0f:49:8f:9f:bb:e0:
23:79:1c:46:c5:47:e0:1a:5a:eb:4e:18:34:f6:4e:
08:a0:1e:36:c1:2d:34:2e:51:46:d7:3d:01:af:cf:
5f:4e:cd:95:f7:1e:64:78:e7:41:a3:00:91:04:87:
ec:5f:11:4f:a0:13:c1:96:53:e9:eb:be:86:08:f4:
e4:d4:d9:9b:9c:a9:b5:e6:2e:ea:35:a1:77:e5:0f:
95:4d:16:d0:a3:e4:8b:ef:8b:fe:f6:21:6f:16:34:
02:63:bb:82:fc:ce:7d:2b:31:61:2d:ff:a9:a7:88:
08:b5:8d:0d:fc:5f:de:22:43:36:38:3b:ee:e4:34:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:3F:AF:C1:E6:BE:5C:8B:92:FA:3C:55:F1:B4:E2:98:7D:53:58
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:00:7f:ac:1d:67:f0:75:3a:7e:61:19:08:d9:af:e7:90:
3a:fa:c4:ad:b1:28:db:23:0f:36:d6:da:4f:cf:d2:85:69:4a:
94:fc:9d:f3:8e:b8:12:db:ec:91:f6:0f:52:be:c9:8d:38:0d:
76:df:32:41:c0:b3:3d:ac:4f:60:5d:99:1f:26:b0:c3:8a:2b:
bf:13:bb:e8:15:3b:e5:e9:3a:6c:3f:be:16:06:59:a8:ed:64:
3c:02:7d:d1:d9:c4:ea:39:02:04:a5:93:01:bc:c2:72:de:be:
30:64:80:59:f0:3f:2d:12:97:61:67:ab:89:a2:af:21:01:22:
8e:a0:38:9a:b9:f2:90:f4:64:67:63:17:b7:4c:23:97:cb:bb:
59:32:37:db:71:19:1d:e9:59:5d:0a:19:18:3f:7a:09:6c:7b:
c2:17:72:b6:c5:f3:d8:48:c0:e3:28:7d:18:f6:5e:19:57:b2:
e2:26:10:41:62:0a:3f:ac:29:27:d1:f2:0b:a7:0c:e9:59:62:
c2:d6:67:9e:b6:37:d8:7c:9b:65:c0:2d:64:bf:68:16:96:75:
3d:02:46:ea:65:b1:4c:0d:48:d9:83:d3:ea:29:c0:05:4f:ed:
34:43:0d:92:11:8a:88:01:6b:87:66:64:3a:68:81:3f:96:dc:
07:42:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:23 2025 by rpki-client