Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: SRVq9HjahvXQTwAzttuG8Bp/HzBe+fJ3c5moxqQ89UQ=
Subject key identifier: 96:58:76:C3:CD:51:18:3F:0F:F4:7A:B9:A0:4D:C1:87:F7:7E:5C:5B
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 0198D5BBC8ED0458542E339617D1A6084516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0D72
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (hash: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=)
2: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
3: mj78j7-0AeevMahy3Oa3oEUR37o.roa (hash: GV37V8PynELJMOdG95g3RGrNY37XlDLhQkTKeFw+n+A=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: HDwikqeTzQcUyzOvgx17Y9MJjUcP8YKk4YnTuUum2ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c8:ed:04:58:54:2e:33:96:17:d1:a6:08:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=965876c3cd51183f0ff47ab9a04dc187f77e5c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:3f:b2:b3:4b:f3:bd:d5:fd:70:6f:54:36:
85:2b:18:eb:a3:38:3e:68:d0:6d:04:0a:95:ed:60:
af:06:f2:d5:14:71:84:96:44:08:b8:3e:e2:a5:63:
7e:76:e2:e4:dd:2f:fb:31:8f:31:5d:0f:4a:9c:e5:
ab:5f:47:9b:11:5d:f0:74:8d:d4:c1:ac:cd:ad:e7:
42:b5:f6:56:f3:96:56:f9:9a:04:75:d3:37:5c:12:
10:b4:02:82:bf:4f:f9:13:8e:49:89:3e:81:54:e2:
59:a1:69:10:b8:eb:37:24:74:80:92:99:f2:e5:9f:
05:cc:c5:da:9d:19:0d:ce:3f:14:9d:c1:e7:da:29:
11:ec:a1:89:51:f6:f2:65:52:51:bd:dd:ea:9e:1b:
f6:16:a3:00:8e:e9:59:16:a9:30:61:c5:ce:82:3b:
4e:44:f6:d2:42:47:25:0b:b2:31:52:ac:df:9a:14:
db:a1:d7:d0:0b:f1:90:05:94:95:8a:84:79:d0:51:
84:dc:fa:45:17:43:af:64:e2:e6:f4:52:cc:f4:5b:
f5:e7:45:cf:29:92:1d:b7:08:96:81:b5:57:fa:9f:
38:13:f1:59:ef:a9:ac:a2:48:9c:fc:ec:c7:c7:57:
2b:f9:8e:3d:d2:6e:1f:4b:52:66:a3:b0:a7:87:f4:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:76:C3:CD:51:18:3F:0F:F4:7A:B9:A0:4D:C1:87:F7:7E:5C:5B
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:8f:da:59:93:63:a2:a7:99:35:8a:57:e1:2b:77:b8:38:
6d:b7:b3:54:99:8f:1c:49:01:54:6e:a9:72:36:bc:ae:0b:0a:
80:31:f0:e9:a9:83:95:d7:43:43:8b:45:4f:17:07:ec:e1:93:
4d:6f:37:20:7e:cd:4b:16:6d:b8:ca:71:e0:d4:9a:e1:6a:9d:
c9:27:3c:0a:a8:78:82:39:70:b4:e3:5b:db:48:cc:c3:eb:b8:
54:02:c9:1e:61:e8:34:eb:fd:6e:1b:0a:02:70:8f:b8:a3:61:
c9:ae:25:51:a8:d2:07:9f:8d:c8:41:78:b8:43:5b:23:ba:6d:
18:19:ba:0e:c2:8a:91:b5:f2:0d:13:36:d7:6d:c7:3c:45:f8:
2b:a2:86:26:2a:8a:b9:63:48:a8:ea:b6:ba:20:c4:2e:8f:51:
3d:dc:b9:91:c0:6c:86:90:f2:56:31:18:db:3d:c2:ce:58:77:
25:f4:12:5d:94:5e:0c:10:8a:32:a4:5c:20:36:90:ed:cc:9b:
d6:be:78:9d:61:f7:4f:d0:a0:de:1d:c4:2a:66:6e:21:b3:72:
16:9c:ca:dc:f8:a6:18:43:63:1a:8b:25:97:85:43:0c:66:8d:
d2:fa:7d:02:0c:b2:f7:c4:04:0b:7a:a6:cd:fe:7d:53:66:0f:
f6:02:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:53 2025 by rpki-client