Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: ziBOxSnF1EHGIIpX8oYGn21buw2UZ7puepk/TXGeXlI=
Subject key identifier: C1:54:0B:53:E1:BE:5A:B6:95:FD:5A:23:18:09:72:64:88:D6:DA:92
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 0197B632A2A377A2E09BBE124F7EEA4858C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 0448
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: CKLiRZk1GtCUVMFZFmsw08GmzcpRf6gEoSiv3h3iyks=)
2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a2:a3:77:a2:e0:9b:be:12:4f:7e:ea:48:58:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=c1540b53e1be5ab695fd5a231809726488d6da92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:b6:97:ae:ca:bb:77:78:7a:c5:0a:b9:11:
56:49:71:cc:1e:d1:75:44:7b:b9:3c:a1:7a:aa:e4:
b9:83:12:a9:23:a3:6d:24:8d:67:3f:60:76:87:ae:
e6:36:0d:92:ac:fb:1b:6e:c9:bc:8f:f6:d0:98:1a:
81:6e:36:f5:a5:02:60:32:cf:39:85:fa:0d:3e:8e:
5b:73:6f:62:a1:f3:40:71:6e:cf:70:63:e4:ca:9a:
c5:66:88:ae:7d:55:10:d5:07:ac:1b:a9:31:77:ea:
b5:42:d6:06:76:c6:74:52:cf:f4:81:76:d9:53:3b:
f3:44:6c:34:10:20:e6:0a:37:08:dd:be:cc:df:0f:
44:c8:ca:21:6b:eb:67:da:df:12:57:be:e1:d3:88:
07:c1:7e:61:d5:7f:2e:6e:e8:dd:0a:ac:91:67:d2:
c0:95:0b:91:65:a5:8f:14:fc:0a:91:34:f1:10:be:
f0:ac:4b:23:da:8c:4b:6e:6a:99:45:e2:f8:46:0e:
18:d4:35:39:3f:da:12:e0:72:b6:1e:a9:d2:76:bf:
e7:25:96:e0:5b:a5:89:f6:8b:29:c7:b0:82:5c:fc:
06:36:af:b1:a4:8c:c1:21:de:a1:88:fa:ca:7f:8c:
53:46:12:51:fc:2b:64:63:70:91:fa:e1:83:c0:8c:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:0B:53:E1:BE:5A:B6:95:FD:5A:23:18:09:72:64:88:D6:DA:92
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:93:78:45:f2:f8:cc:3d:30:00:6f:33:81:f3:90:13:8f:1f:
46:7d:30:95:24:a6:fa:64:40:37:69:67:f4:de:82:07:63:83:
aa:a3:d0:bf:68:6a:ed:64:ed:fd:07:11:70:88:8e:ce:7f:3c:
4f:22:22:29:47:cc:df:f3:ab:41:eb:9d:74:90:a9:df:cc:f0:
94:91:8a:88:b5:d8:ad:57:fb:54:76:3a:8e:e1:77:01:87:97:
ee:a7:ff:69:4f:22:5e:c7:1a:99:a1:21:4f:6c:e9:d2:99:a4:
33:af:ff:ac:0a:f3:5d:00:50:22:d3:a5:89:e6:c5:72:3b:45:
6c:d5:bb:a3:4a:83:a7:ae:5f:cb:36:ec:5f:fc:ec:e0:de:4d:
b4:99:21:09:85:fd:ab:47:6e:fa:a5:52:65:db:d3:b0:e2:bd:
16:f3:13:ab:61:ff:62:58:b3:67:fd:6e:20:fb:54:6a:87:5b:
d1:98:89:d4:47:34:ad:0d:4d:ea:64:21:8f:97:71:e5:02:ad:
9e:44:61:89:d5:4d:a0:56:53:30:ca:19:d0:c4:9e:1a:7b:94:
b4:d5:c3:5a:68:b5:cc:52:70:7f:68:0d:a6:bc:49:b2:cb:0a:
63:2b:fe:f6:1d:82:09:1e:47:de:28:89:fd:73:aa:66:45:15:
56:dc:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:51 2025 by rpki-client