Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: lsJHFnOPGp8qOeoiFxIUfQjd7vCU68x/hrZow3txUDo=
Subject key identifier: 6B:A0:78:A5:6D:C5:BB:18:A8:E5:8F:D4:8B:B3:5B:2B:72:23:FE:B6
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 0197B74516D6D03DA077237010A17BED1D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 1300
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: r9cDBieNtGjaIkEEXZYT/47+DJW4ogjNA64De2CNTb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:16:d6:d0:3d:a0:77:23:70:10:a1:7b:ed:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=6ba078a56dc5bb18a8e58fd48bb35b2b7223feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:86:69:db:5a:94:83:b0:65:ce:9c:67:f4:
28:c5:e5:06:29:0d:5a:ad:e5:12:6d:ae:65:ac:59:
75:c7:f3:c7:f6:e3:c1:ec:82:d5:0b:c0:c0:20:e4:
dc:cb:0c:29:a5:bc:66:9b:5c:bd:37:70:33:fd:97:
43:25:46:35:89:00:94:80:e2:c3:d9:ba:fb:f7:00:
c4:39:ec:09:2f:27:a4:31:b8:91:e6:87:8f:14:0a:
66:ef:6f:02:65:47:75:3a:ae:76:ea:d7:4e:69:fb:
0b:b4:76:22:1c:e7:d7:b2:5b:b6:c4:c5:de:b7:27:
66:71:04:a5:92:ad:de:0a:72:9a:ff:81:87:26:76:
1c:36:35:18:5e:59:83:a5:b6:0e:a3:c5:b3:31:9e:
69:e5:50:cc:68:0a:12:32:40:b4:f9:72:61:ea:50:
b4:f8:e3:63:4d:14:89:49:55:f0:a2:a6:df:79:31:
c3:44:d1:26:9e:44:d7:93:a9:3d:5e:cc:95:c4:5d:
68:63:a7:4e:bd:b1:32:db:15:de:dd:1c:ca:4b:0b:
90:5c:1c:b2:2e:11:13:2b:9e:6e:f1:c2:7e:bd:bb:
65:b4:0c:ee:e9:72:7b:a6:09:34:25:c8:38:71:11:
37:42:df:04:39:2e:a7:26:16:99:6f:14:23:1c:8a:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:78:A5:6D:C5:BB:18:A8:E5:8F:D4:8B:B3:5B:2B:72:23:FE:B6
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:16:fe:4b:b3:5b:16:8a:3b:0d:9c:35:4b:f3:67:88:6c:
2c:17:7a:c8:cb:df:78:e8:b3:b4:b7:c4:5b:0f:3e:c4:b7:51:
5e:a7:7f:a8:0c:94:65:44:d5:67:40:d3:0c:0e:0f:1a:8e:80:
5f:ff:07:cd:57:82:80:3e:50:6b:6a:cb:b6:b4:96:06:9d:ac:
b8:0e:3a:b3:e4:8d:74:b9:5f:cd:c2:f0:a5:36:3b:72:03:7e:
24:f6:34:b3:7c:bf:8b:65:c7:1a:8d:00:fb:53:7a:f9:90:73:
4f:84:de:01:27:fa:a9:59:c6:b5:eb:f0:c4:30:10:b1:f0:c4:
e0:68:70:b4:a7:ff:66:83:0f:58:fd:62:64:c0:17:cc:68:c7:
fb:4a:32:4c:5f:b4:69:79:b6:f0:02:a0:db:3a:0e:23:be:86:
4d:e2:e2:55:0e:0d:52:45:f7:df:80:d9:0c:a9:28:9e:6a:19:
a9:4d:79:fa:bb:27:19:b8:e7:c5:df:c2:12:da:23:78:3d:d3:
ef:32:d8:b6:d4:02:c7:ff:32:13:bb:02:f9:55:6f:4f:7e:0c:
49:ab:60:bd:30:22:25:1f:3e:9b:23:9d:44:23:9e:8a:46:33:
52:64:73:48:10:a1:c2:d3:2f:2e:2b:bb:1b:bf:5a:c0:fc:31:
fa:ab:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:11 2025 by rpki-client