Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: au6naE7VUeLJFUUMqkSAn2388/pKKm2n2rv1xkd9Ae0=
Subject key identifier: 6D:9E:21:F1:88:B2:51:70:B3:9E:8F:C6:5A:29:C1:C3:FA:D6:BF:0B
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 0197C1C8B495D69EC1EFDB48EB4A427930C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0CE3
Signing time: Mon 30 Jun 2025 17:00:45 +0000
Manifest this update: Mon 30 Jun 2025 17:00:45 +0000
Manifest next update: Tue 01 Jul 2025 17:00:45 +0000
Files and hashes: 1: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
2: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: c1jRdfdlCjO6ecP+QTwddjaH4ygDCFV5uDyuAvn79hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:b4:95:d6:9e:c1:ef:db:48:eb:4a:42:79:30:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jun 30 17:00:45 2025 GMT
Not After : Jul 1 17:00:45 2025 GMT
Subject: CN=6d9e21f188b25170b39e8fc65a29c1c3fad6bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:0f:d7:76:33:10:3b:b0:6d:49:16:29:99:
dc:d6:77:b2:cb:d2:31:bb:d0:30:72:2c:80:ae:94:
6c:84:8e:c9:e1:97:53:6e:2e:48:f2:2b:4c:93:3b:
70:01:e6:08:18:d6:67:26:6d:43:af:08:12:46:90:
ea:d6:91:b7:5a:19:8c:e3:7f:58:85:ea:8d:db:80:
68:12:b3:a6:9a:09:cc:9d:b0:de:02:81:f8:ae:68:
26:35:f6:87:8b:67:9b:63:72:4b:36:0f:c2:3d:4f:
9a:1d:b9:9c:87:65:c8:8a:db:10:d0:34:85:15:c4:
55:10:1b:bf:22:34:6d:9c:b0:50:b7:cd:bc:fa:1c:
73:12:ed:83:12:2b:f2:5f:a1:44:de:c4:6e:5c:cd:
fb:ce:43:0c:b9:6a:fe:39:5f:1d:cb:ad:c8:0e:e5:
f3:c8:02:4c:5e:10:71:16:ed:85:ab:a1:ac:5c:fe:
5f:65:63:ae:17:ac:0a:d8:c0:fd:25:d2:36:1e:c0:
2e:a4:94:5a:9c:f8:56:26:4c:61:16:47:16:cc:a0:
3e:0b:63:c4:67:f9:56:86:3f:3b:d2:b6:01:5a:a5:
b6:ee:ae:f5:85:02:37:05:84:90:bb:eb:26:1c:f1:
f8:ac:21:a3:6e:f2:29:4d:0e:a7:60:72:91:6e:9a:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9E:21:F1:88:B2:51:70:B3:9E:8F:C6:5A:29:C1:C3:FA:D6:BF:0B
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d0:1f:23:cd:db:1f:34:e1:c4:9a:56:38:84:85:05:81:55:
75:00:44:91:72:48:b0:61:fc:a9:ed:e2:26:98:07:54:8e:85:
3c:3f:e3:39:ab:48:f8:b9:aa:a7:79:d2:0b:e5:bc:f1:b0:0c:
8c:eb:55:c1:16:43:05:3f:d9:cf:d0:5a:02:f3:35:de:78:31:
62:a3:be:da:8f:2b:7b:3f:c6:f5:51:39:80:e3:ef:e9:b2:b8:
39:e8:51:f5:c8:6b:d4:d9:d0:8d:4f:af:a4:9f:df:d6:b0:14:
d4:3f:b0:4e:b7:2a:27:03:b6:0c:1f:6e:ef:d4:1b:23:ce:94:
d5:c0:26:87:96:0f:b9:4d:cf:6e:ba:2f:36:e7:8b:38:ca:92:
85:21:96:1f:54:71:03:8b:08:f9:ae:a5:e1:66:d0:f8:cd:1a:
2c:f3:f0:a9:2c:ed:c9:f1:c4:f4:dd:9d:eb:ae:a5:d8:84:88:
1a:23:41:1d:14:b6:9e:e0:ea:c6:c8:ed:36:32:46:43:a1:ff:
1a:58:38:f8:c6:8c:1e:ac:0d:0a:33:d6:f4:f5:16:5d:21:99:
79:10:1c:8c:47:56:08:b8:d3:a1:77:0a:48:67:59:00:17:21:
a3:4c:25:62:5a:94:50:d8:1f:76:2c:0e:fc:ec:af:6f:3f:7e:
e8:55:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:51:04 2025 by rpki-client