Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: 9b/kOlbbPJaK4OrCZJxiTg27xZqCRvDVaF3bJ+VaZrY=
Subject key identifier: 3D:FD:5C:FF:AC:3E:B3:B9:07:63:F3:99:76:87:B8:CE:4A:FF:00:7C
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 0197B6A0F1E1FD5BF83990FF4B0D2FB8190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 11D1
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: ROdPiWo3A/+tQKX5FuhoZmME0DYTin8pqrvZ4wZUiyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f1:e1:fd:5b:f8:39:90:ff:4b:0d:2f:b8:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=3dfd5cffac3eb3b90763f3997687b8ce4aff007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:23:f8:3f:d4:c5:f7:69:17:44:27:0c:2e:
b8:b2:d4:9b:2b:74:07:1d:86:c8:33:62:ab:53:74:
19:20:ab:46:a8:65:5b:74:4e:d4:9b:aa:b8:f1:9a:
84:a6:d8:1f:d0:f7:bc:34:f2:f6:0a:2a:43:53:17:
59:05:09:a6:12:af:20:62:f3:a3:6d:10:5d:ae:09:
4b:83:fd:90:1e:04:f3:4e:ec:2a:16:91:25:1c:44:
2a:f1:65:b5:9b:0a:64:20:ff:97:7b:69:cc:41:08:
bd:73:de:ba:c1:86:6a:33:cd:a0:bc:e1:df:ec:aa:
19:3b:5a:ad:4a:5f:97:ed:32:88:2d:66:80:d9:1a:
63:0d:59:b9:84:9b:b8:78:db:ea:57:cb:df:d1:a9:
ad:fa:f5:d7:c4:1e:83:bf:e2:b7:7f:88:ca:af:02:
c3:f9:2d:9c:8c:32:d6:f4:b5:7c:66:7e:28:0a:49:
3b:87:00:82:a3:17:bd:3b:7b:9f:e3:60:45:7b:1b:
df:66:b7:49:a7:19:83:c2:6e:46:11:12:1c:2f:7b:
02:2c:8d:8c:41:c1:01:56:0c:f9:51:c9:99:d2:b5:
ce:4a:78:6b:a5:eb:84:70:6e:37:57:7e:8f:cc:9a:
2a:b2:41:44:bc:3d:1d:28:93:15:99:c7:de:ad:de:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:5C:FF:AC:3E:B3:B9:07:63:F3:99:76:87:B8:CE:4A:FF:00:7C
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:82:d5:cc:8f:a1:4f:76:47:51:97:ee:c7:aa:27:59:1d:
09:23:7e:53:47:ea:88:91:db:4c:0a:0f:b1:b1:ef:af:b1:98:
74:14:24:cd:09:c3:f6:16:9a:d1:b2:e2:88:75:7d:57:64:93:
41:9b:d6:74:35:fd:84:54:9e:62:a8:b1:38:a0:f7:b8:8b:11:
72:66:dc:39:60:56:de:00:ad:f8:d5:0d:55:3f:0a:b2:2d:75:
2e:e8:9e:20:c5:33:eb:1b:b3:6f:71:7c:cd:50:ed:6b:2a:d2:
7c:76:a6:5f:69:01:f2:a3:ae:2a:e4:7b:cb:53:e9:f9:e6:61:
9b:85:74:c2:b8:21:24:07:4a:c3:3a:1d:2a:6d:f3:f1:e4:ab:
23:f2:31:88:a5:42:c9:67:40:31:47:07:dd:e5:b5:b6:42:58:
ec:12:11:95:6c:76:90:b7:24:2b:98:cb:71:e7:57:21:b7:c0:
3e:e1:5e:ff:08:a6:d2:88:b0:1a:4f:c7:05:61:ce:f6:ab:99:
49:1e:2d:4e:74:61:06:0b:7a:74:94:37:ac:c9:e4:b1:8a:91:
1b:a4:63:79:55:f1:6c:10:aa:5c:1a:b7:da:e9:76:50:b0:41:
0c:85:d6:f4:d1:1f:76:22:c8:21:08:ed:b3:55:02:6f:f5:a8:
9b:e1:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:00 2025 by rpki-client