Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: yBHiJcu2aCwvQIx2cvgG4HHF38hgjivQZOU4if4eTkY=
Subject key identifier: 85:28:58:0B:20:75:E4:42:A4:76:E5:D3:DD:D6:11:74:81:6D:B4:CB
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 0197B7EA8DD56AC632F935331178F31495E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0ECA
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: w1JRrwjn9Eg/DHvKH7nDEgCL2YwdegeR3vbQwufBJfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8d:d5:6a:c6:32:f9:35:33:11:78:f3:14:95:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=8528580b2075e442a476e5d3ddd61174816db4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:75:ce:b0:0b:7e:bb:7b:51:36:b4:39:54:
51:ec:54:4b:dc:1a:2a:89:62:6c:5f:3f:15:fa:c0:
39:79:9a:f1:8b:c3:ca:b7:a0:d1:fc:26:eb:40:41:
67:52:9c:36:27:71:e9:df:77:43:7f:6a:9e:86:55:
57:b2:b7:03:20:c0:66:ec:1c:43:3d:1e:39:c5:96:
72:72:0e:70:e9:fe:4d:99:71:d1:5b:66:f3:7e:68:
24:ec:15:3f:7a:af:e8:d7:db:ea:d5:3e:f7:cf:c7:
3d:cc:34:03:40:ac:9e:9e:29:6e:f0:72:ea:77:d6:
d6:fb:20:63:7e:c8:58:87:3e:e3:cc:b7:0a:ef:21:
cb:3d:17:04:93:69:24:09:ea:13:50:f0:9e:8b:7a:
53:96:3c:4c:77:a8:78:3c:10:61:9b:0a:ab:7b:64:
32:01:df:16:74:a4:d6:a1:1e:aa:40:dd:f6:03:e4:
c8:dc:80:db:96:36:b8:cf:2c:06:6c:4e:b5:ce:86:
ad:e0:72:e6:56:17:6f:f7:42:a3:ba:d0:01:38:b5:
cc:64:4e:ad:ac:ed:0a:9b:c4:28:93:34:0d:03:c1:
65:b2:2f:d2:4a:c1:df:38:51:b7:45:e1:7a:18:12:
32:bc:6b:b6:66:e3:8d:c0:27:bf:47:27:36:78:76:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:58:0B:20:75:E4:42:A4:76:E5:D3:DD:D6:11:74:81:6D:B4:CB
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ec:37:5f:5d:10:54:ee:4a:2a:a9:b4:2a:93:11:8d:67:9a:
51:57:7d:ae:56:f6:b5:8f:aa:dd:a9:a6:01:7e:17:9e:48:25:
e0:96:be:b1:d8:93:a2:83:71:58:71:ec:75:ab:c7:f2:2c:a8:
e9:fa:ca:68:15:f5:94:1c:5b:b6:08:8c:be:de:c8:50:32:02:
64:ee:73:af:5c:e4:25:ac:bf:8f:63:da:94:a8:18:94:83:50:
50:b9:b0:99:31:7e:95:7d:f1:24:f2:64:a7:66:90:be:bb:3c:
d1:4c:94:c5:aa:f7:07:e5:7c:cf:e4:8b:7d:7f:a5:df:f8:7f:
e8:c0:f5:80:10:99:33:a2:57:be:43:da:54:9b:8a:90:98:f2:
90:9c:0c:e2:16:0c:6f:2b:24:fa:2a:3c:a2:ff:8d:ce:c2:d1:
f8:c1:38:dc:01:73:7a:fb:72:3b:38:08:ca:8f:51:76:be:0b:
e6:27:f0:de:50:ec:e7:85:e9:8d:1b:35:a4:11:d8:7e:dc:d3:
c7:98:c3:03:48:be:7f:ae:15:26:10:e6:4e:3a:34:03:1b:68:
ea:a9:7c:dd:3c:ef:e3:de:5a:3e:81:f9:45:4d:3d:1c:b2:f0:
0b:f4:e1:94:0a:39:87:d8:60:4d:2c:68:b8:34:3f:fb:31:08:
b0:39:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:15 2025 by rpki-client