Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: BiqcuDnTSuykzFNK259zsMF7A7PdYR9zDthwYjLw/XU=
Subject key identifier: C8:31:9D:5E:5B:70:B4:70:4C:5D:BA:D2:C0:BC:D4:00:42:7C:B2:BB
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 0197C04A3C3AC33F8CBE3F446C5F13EDFDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0A32
Signing time: Mon 30 Jun 2025 10:02:59 +0000
Manifest this update: Mon 30 Jun 2025 10:02:59 +0000
Manifest next update: Tue 01 Jul 2025 10:02:59 +0000
Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: 3uytDOqGXXGI61Hc8H1nY5zfPUSnbcXsMn+S6Vc7h6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:3c:3a:c3:3f:8c:be:3f:44:6c:5f:13:ed:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Jun 30 10:02:59 2025 GMT
Not After : Jul 1 10:02:59 2025 GMT
Subject: CN=c8319d5e5b70b4704c5dbad2c0bcd400427cb2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:cb:fb:b8:7d:15:38:b7:8c:23:fa:bf:c6:
42:67:89:bf:d1:8f:89:32:34:2c:c3:ff:f4:d8:b3:
e4:4f:aa:71:42:56:b5:2a:cd:dd:60:9c:3d:d8:05:
79:9f:73:51:3e:0c:95:55:74:a7:99:b9:85:57:9f:
59:71:34:54:4a:2c:5b:85:42:9d:d7:17:58:de:de:
cc:0f:81:ac:d9:45:59:e3:7e:d8:f8:6d:fb:f6:c7:
e2:f4:50:58:be:e4:a3:4e:eb:b9:db:b5:10:98:5c:
96:32:cc:56:62:c6:80:99:2a:74:1d:c5:c1:34:ff:
ab:1a:27:79:e5:da:bf:1c:bd:b4:bb:11:60:c7:c9:
6b:e1:78:14:88:59:b8:4f:54:59:c8:bb:db:e8:5b:
fa:52:d2:d6:ff:d0:27:b4:c4:49:5f:a0:67:a8:d2:
46:2f:4d:c7:bc:6d:12:26:ae:25:8f:22:40:b4:11:
2c:ed:f7:c8:bb:e3:d0:f0:10:c7:dc:59:76:05:6b:
b6:6c:b8:ce:48:64:14:02:43:ca:81:c4:30:9b:14:
bb:19:e7:d5:1b:66:ab:1e:46:04:b2:ed:a9:7b:17:
35:0d:f4:4c:d8:ff:e5:9d:67:a4:66:12:f1:e1:ed:
6f:bd:ad:b8:43:02:09:67:89:4b:e6:16:6b:fb:0e:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:9D:5E:5B:70:B4:70:4C:5D:BA:D2:C0:BC:D4:00:42:7C:B2:BB
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:a1:97:e9:64:ea:50:d6:c9:0c:4f:94:fe:0a:72:ae:a0:
0d:75:56:cf:09:7d:fe:28:e1:c6:c5:4f:10:c4:a6:f8:39:8b:
a7:b7:0e:d4:34:e6:fd:97:2b:a1:6c:c0:6e:29:c0:92:a8:10:
a0:9a:13:c0:b3:f5:32:58:da:31:17:af:cd:bf:4f:25:67:61:
11:88:b3:b7:6b:93:01:76:8a:a8:3e:28:6d:80:1a:3f:06:2d:
f8:41:dd:50:5f:3c:18:be:a4:1b:69:8e:ad:02:fd:ac:10:0d:
3b:5e:8b:9c:66:30:93:1a:99:f9:ad:04:17:31:dd:e8:6a:ce:
31:02:d6:e3:39:26:da:0a:c2:8f:42:4e:18:bd:b7:36:dd:0b:
95:69:6e:f8:d8:c8:7a:c5:42:0b:8e:0a:d8:61:81:9f:8b:80:
3c:da:41:9f:3e:5d:09:af:46:48:65:3b:67:8b:f9:56:44:c8:
c8:bc:bc:fd:f6:55:ad:9d:8d:76:b5:71:e2:9e:3b:29:8f:b1:
ae:3b:6c:c7:a7:49:da:5e:b5:89:2c:e6:90:30:52:94:35:de:
ae:99:72:64:2c:2b:f1:9b:51:a9:24:9a:32:5b:9c:58:31:f5:
1d:cf:57:7f:63:94:bd:5e:30:6c:b4:3f:3d:bc:73:2e:a0:07:
bc:69:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:42:47 2025 by rpki-client