Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File: uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier: PhBOjMJAk+8f2THY31rCERCJ4uHZxnoVzWlG+PumPEo=
Subject key identifier: 9C:53:48:4D:06:61:73:6A:2A:B6:0A:3A:97:0E:76:36:FD:6B:03:FD
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial: 0198D5F1BB179324C6DC2B3324956A412AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: Ad9fi9qlun6YM_gFezIokOCQkLs.roa (hash: S4qKDAh1WyrdkcGPs8CGFXh64ebt7vNp8v8VXZtyJ2o=)
2: SW07hbnebVdCqrbU8syhynqAX7c.roa (hash: fHq3wBn0v/bUheMJ6DOC8R/E4a6CfE2fSibEdOoR5GY=)
3: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: usiJzt8UNsopBIyzx/yORxGIqusEzfSgZI9vM7C144U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bb:17:93:24:c6:dc:2b:33:24:95:6a:41:2a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=9c53484d0661736a2ab60a3a970e7636fd6b03fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:41:f8:8d:dc:5a:7f:85:82:d0:96:60:58:
1e:0b:e6:fb:a1:02:c6:88:d5:0d:e5:b2:2d:d4:0d:
5c:08:9d:d5:0c:86:ec:d6:54:9f:e0:ad:ae:be:0a:
a5:9c:a9:1b:f5:a2:79:9f:4e:65:12:81:b9:76:20:
5a:09:ae:7f:aa:e2:01:b8:17:b9:a3:9e:f5:fa:a8:
d0:25:43:0f:76:9a:59:97:3d:b6:1c:c5:f5:b8:18:
cc:c0:21:a5:77:07:52:53:f1:fb:ea:db:a6:28:12:
ec:57:b9:d0:1e:cb:70:73:0f:f3:96:f2:eb:4e:31:
78:83:e8:7f:2a:2c:57:08:75:17:cc:87:3c:33:2d:
9e:45:f3:1f:52:82:52:09:7a:e9:64:b7:ad:68:d2:
64:dd:32:2a:84:ce:2e:69:67:2c:58:6d:67:b5:3d:
f7:1f:67:93:cd:62:c1:40:7c:c5:c0:de:8d:ff:c2:
f1:3c:5b:3b:3c:b4:e0:73:c3:e7:dc:a5:d0:9f:4d:
37:88:ca:22:45:73:09:46:92:57:9d:f4:31:e8:fb:
8c:7e:33:bd:60:22:04:b3:a3:ff:01:fa:82:b1:41:
07:d3:78:d6:0f:d8:df:12:19:7b:56:9b:32:ef:e1:
4c:6e:4a:67:88:f8:67:1f:5d:9f:ef:9f:17:65:55:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:48:4D:06:61:73:6A:2A:B6:0A:3A:97:0E:76:36:FD:6B:03:FD
X509v3 Authority Key Identifier:
keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:fc:6e:78:0e:f5:4d:a2:e6:44:fe:2c:43:1e:c9:94:fa:
eb:2a:27:30:e0:36:3c:30:4f:b9:a9:71:ba:13:9e:b3:8e:43:
76:ff:f2:0d:aa:3e:e5:82:8d:94:9d:b7:9a:19:40:70:e4:0b:
74:85:93:db:d9:25:95:1a:20:bf:82:c2:6e:4b:ad:e1:f6:64:
7e:6a:17:65:75:59:76:00:ca:37:ee:c5:98:82:6f:27:37:a0:
1c:8c:02:bd:75:c5:37:77:76:4a:e7:8f:91:15:94:7e:f4:97:
35:c1:01:2d:4c:b6:c2:70:51:18:c5:44:69:3c:80:d9:55:b2:
08:9c:c5:56:fa:c3:cc:ed:af:25:cc:fa:d9:a2:93:c3:2e:ef:
03:8a:73:a6:39:06:80:82:ea:57:4a:9d:af:ec:d4:21:de:dd:
b6:7f:b7:a8:10:08:52:98:0c:63:0e:88:57:c2:aa:82:67:88:
94:73:35:76:4b:e8:67:d4:10:0f:12:31:7d:4f:4d:6c:bd:8f:
88:40:4b:19:ba:f6:18:ab:ee:83:b6:8f:0b:10:b2:ac:1a:2b:
9b:ac:14:db:0f:e5:98:8c:4b:cf:fd:32:ce:00:d8:71:26:3e:
0f:94:2f:6d:5e:df:7a:40:29:43:7e:9d:e9:23:73:3d:79:4a:
a4:a0:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:22 2025 by rpki-client