Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: FcSygRl1C17eOvOJuMkqFD8a0txmDKYuLge4q/YryvA=
Subject key identifier: A3:75:67:6E:8C:38:3D:8D:DB:4D:16:CE:AF:30:56:70:0A:5A:77:C1
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0197B82126A1757F0847677060C1EFD11ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0C33
Signing time: Sat 28 Jun 2025 20:01:09 +0000
Manifest this update: Sat 28 Jun 2025 20:01:09 +0000
Manifest next update: Sun 29 Jun 2025 20:01:09 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: g79nAZdpTba9JqnkDoQN0ihi/hbAYQcCOYgr/qhC8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:26:a1:75:7f:08:47:67:70:60:c1:ef:d1:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jun 28 20:01:09 2025 GMT
Not After : Jun 29 20:01:09 2025 GMT
Subject: CN=a375676e8c383d8ddb4d16ceaf3056700a5a77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:75:12:9d:20:ed:b8:ac:15:8e:2d:00:35:
54:91:a3:8a:57:e6:06:ec:e1:dc:e3:c7:ca:46:5c:
95:c9:0c:17:cb:7f:8e:ec:87:18:17:60:30:d7:78:
14:b0:10:0d:e7:9a:67:76:ef:19:25:a1:60:a7:b8:
62:f5:8c:6a:04:59:ce:f2:59:b0:b4:76:ca:49:fe:
4a:ff:1a:9c:c2:02:7b:96:d3:bb:2e:ed:7d:c2:7b:
30:d5:71:96:61:eb:07:1f:c5:51:7a:6f:af:17:23:
37:2e:be:35:2c:6b:50:fa:a6:f3:3d:48:71:f5:03:
43:15:ee:1f:03:a1:d4:46:74:88:89:3a:2b:4d:5d:
36:3a:72:32:a7:d0:f9:ac:11:48:df:2d:e0:75:9a:
bc:4b:c4:3f:f0:1f:6b:0e:d9:32:e9:cb:55:20:40:
02:8a:73:77:01:65:3d:7c:e0:0a:1b:31:8a:48:85:
bc:75:23:b0:e2:d9:a0:6b:82:fb:20:37:13:d0:83:
4a:64:b9:2e:bf:46:b5:dd:b1:02:11:f0:4b:c1:2e:
ec:3e:dd:37:79:c3:f1:9b:cf:10:e2:8b:42:28:ef:
86:83:40:fc:99:d6:d3:02:ea:04:e2:55:9f:26:97:
8a:cd:50:35:e0:b0:28:30:f6:ce:da:45:3b:82:90:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:75:67:6E:8C:38:3D:8D:DB:4D:16:CE:AF:30:56:70:0A:5A:77:C1
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:cf:ae:f9:73:d8:c6:55:0c:09:4a:d3:7c:97:43:d9:16:
ed:36:0c:dd:d9:70:4c:4f:9c:eb:61:2a:d3:1f:a4:7f:17:57:
da:bf:f4:55:8e:f6:b0:e0:24:87:5a:67:e9:cc:fa:df:d1:38:
fc:98:f4:e6:27:30:af:fa:ff:b9:40:9f:ca:8e:0e:b8:98:46:
41:cf:cd:79:70:a5:25:c6:30:a0:2b:69:a0:7d:b5:86:83:30:
08:48:de:55:9b:6a:79:08:42:dd:13:b3:59:47:e1:3d:6f:00:
91:aa:23:e9:94:b2:c7:7a:02:69:e1:8e:e7:48:8d:ba:91:0b:
2f:72:d5:97:ee:d2:8b:32:61:60:06:2b:7e:09:1e:44:01:ce:
cd:8a:23:a5:99:62:31:78:fe:0a:a0:28:68:88:bf:b9:a5:f3:
d0:08:26:04:bd:60:b2:19:98:07:3b:0e:5e:58:b1:8f:b9:25:
97:d5:15:e0:87:4a:f1:aa:7e:33:a9:fe:96:41:4b:7c:2f:42:
c0:2a:be:79:56:36:e6:c4:4a:94:f4:5a:08:3b:32:3a:ce:b3:
2d:c7:6b:f5:63:46:76:b5:48:71:00:95:18:94:89:2e:93:f5:
56:2c:cd:33:af:0b:1c:99:55:77:52:d2:99:95:98:6d:2d:90:
49:95:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:16 2025 by rpki-client