Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier: 2epIzrqI/KWhIHNc2iFZGP+rnhmKSZBYn6jYbHPSfEY=
Subject key identifier: 32:A9:07:9F:32:5D:02:BC:16:21:8A:90:08:E7:F7:CC:EC:63:EC:84
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 0197B9337425F69C5835C1673CC71FEF8D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number: 0DAA
Signing time: Sun 29 Jun 2025 01:00:46 +0000
Manifest this update: Sun 29 Jun 2025 01:00:46 +0000
Manifest next update: Mon 30 Jun 2025 01:00:46 +0000
Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: mLr4QtQOgY+tXso7U1jh6dRD2TgATwoSOUcnCB0wgoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:74:25:f6:9c:58:35:c1:67:3c:c7:1f:ef:8d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Jun 29 01:00:46 2025 GMT
Not After : Jun 30 01:00:46 2025 GMT
Subject: CN=32a9079f325d02bc16218a9008e7f7ccec63ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:97:e0:d1:ef:79:23:b9:4d:ff:c3:05:01:
56:37:40:5f:c5:91:0c:07:8d:08:f4:8d:15:f4:3f:
1b:a8:e1:ed:80:8a:62:78:c7:b8:78:19:a8:36:1e:
85:2b:05:2e:23:0e:f8:6f:94:7b:84:7d:1d:07:f0:
4a:37:e1:ca:22:0a:f9:df:53:c5:1d:5b:aa:f2:69:
ea:35:9c:16:c9:6c:40:ed:a5:8a:bd:0c:0b:6f:c0:
b0:de:ee:73:86:db:81:0d:1c:e5:34:67:f4:50:d2:
de:aa:70:be:d0:01:a2:44:04:7c:f9:16:86:f4:bc:
5d:96:86:4c:c4:f9:d2:3c:7c:3b:12:0c:49:8e:0f:
ae:17:a5:fa:2b:97:8e:35:a5:5b:3d:d3:cb:67:df:
b3:82:15:2e:e9:f0:74:0b:a8:48:66:1c:83:e5:40:
41:3b:7b:04:17:6c:21:46:83:08:76:f8:23:74:55:
9b:37:fe:bf:47:bf:5f:c8:ba:34:49:19:9e:02:c2:
f1:c8:71:18:c9:e5:c0:93:8b:f4:ba:9b:aa:af:ff:
63:74:c0:1f:25:25:88:25:4e:d5:85:51:fb:69:63:
5a:9c:0e:e5:cd:f4:55:4f:34:8d:32:09:dd:25:f9:
e0:49:f9:8a:58:4b:99:59:74:a0:e5:58:09:ad:fb:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:07:9F:32:5D:02:BC:16:21:8A:90:08:E7:F7:CC:EC:63:EC:84
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cd:a6:48:cc:78:ee:22:7b:a9:f3:d1:20:30:d6:b0:56:d6:
9f:85:e3:6f:12:58:0c:ff:87:af:7a:3e:57:5a:99:c0:0a:08:
23:c7:be:b5:d8:9f:f4:df:63:af:4d:89:98:17:28:1d:c6:be:
1b:0a:20:67:d3:f7:3f:2f:66:0d:7b:e4:f4:b8:be:5d:25:60:
85:1b:cb:71:ae:07:0e:6a:2f:ad:54:5d:9c:40:fa:33:9a:ea:
9c:f0:3b:9f:5b:2f:9d:05:6b:cb:5c:a8:95:cd:e1:52:6a:85:
4b:92:0c:ab:47:14:61:74:83:4a:e3:85:cb:82:b0:fa:2f:c8:
0d:29:c0:68:e5:3b:55:10:b7:8f:01:60:82:27:36:1f:9a:21:
3c:a5:17:66:ec:08:f3:94:04:71:db:74:47:5a:28:9e:e5:54:
79:e1:6b:3f:df:8d:a8:ff:23:de:d8:7d:89:d6:4f:99:4b:e1:
71:56:00:40:fd:c9:bd:da:4d:d2:b4:9a:5b:80:e4:81:f3:21:
2b:f0:7f:d4:b1:6a:f9:55:06:f3:60:fe:25:cf:23:96:6a:8a:
d9:91:bf:b8:20:9f:0e:ba:e1:63:6a:7b:50:01:7f:39:bf:cd:
67:56:e6:17:fb:9a:48:59:78:fe:5c:08:dc:1f:56:d4:14:bd:
7d:c0:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:27 2025 by rpki-client