Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: 0z/tsvR+jxPy5mWmOsZDtHLujbUQrfeGtuH9Qp+UcJk=
Subject key identifier: 01:9D:FF:1B:41:74:BE:99:05:4D:1B:08:13:73:7D:64:F5:99:C1:4A
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 0197B6A198C687E331EF56562F0B85C10084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0DC0
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: wCuumSOPTpD5J1Oumm1JnFHXXzH3kwGyRuzuSbi+pcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:98:c6:87:e3:31:ef:56:56:2f:0b:85:c1:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=019dff1b4174be99054d1b0813737d64f599c14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:f5:8a:b7:7e:5c:a7:68:2e:f6:28:0f:14:
e1:92:c3:2d:26:16:93:d1:25:af:ff:4c:b7:11:ae:
d5:35:ad:66:e2:55:81:cf:e2:77:55:73:48:d4:c0:
d5:12:92:ec:b4:bb:44:56:e6:ad:03:ea:ae:f9:68:
0b:84:d2:2e:64:0c:80:a3:94:15:ba:71:ba:ac:01:
27:48:d6:1c:d7:0e:0d:33:b2:84:be:d2:68:dd:37:
76:78:c3:89:25:36:c3:a0:61:e4:c6:4c:18:ea:31:
ff:2c:af:78:ad:94:60:b9:a9:e3:99:cf:82:c1:c2:
03:15:d6:f9:9e:76:1a:b9:0a:1c:f7:40:b5:fe:c5:
0c:03:9b:98:a5:2b:d7:9d:21:73:15:3e:d6:14:1c:
7f:12:fc:ec:6a:e8:fe:9f:00:28:bb:69:78:5a:bd:
67:6d:69:76:23:22:31:1f:62:43:ea:7f:8e:3d:9e:
91:c8:a4:20:ba:9d:ec:88:93:b3:ec:14:a6:84:4c:
9d:24:64:71:66:ce:90:0b:5c:70:2e:d8:4b:13:29:
45:81:98:3e:c2:6e:d9:97:52:d9:b1:72:ea:ca:98:
dc:69:67:67:22:46:b3:68:b8:06:03:3a:5b:21:29:
0a:d9:d5:d2:12:0f:0a:92:6e:ef:35:e7:3a:4d:d4:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9D:FF:1B:41:74:BE:99:05:4D:1B:08:13:73:7D:64:F5:99:C1:4A
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3d:6f:43:6d:8b:72:37:1f:8d:40:ca:9e:44:b4:d4:d1:ab:
48:2c:48:50:44:7e:0a:cf:d3:90:8f:8a:41:a7:9f:4c:91:f5:
76:5d:d6:f2:a6:e0:45:d1:56:cd:cd:af:60:71:6e:c1:9f:ca:
41:bc:6a:3c:0d:a3:e8:7a:e0:4f:50:63:d1:a6:ec:73:f0:9d:
48:e3:2a:43:7c:14:f0:2b:01:7d:37:be:ae:70:15:4c:29:28:
0a:2d:04:57:a1:59:77:9a:ee:e3:35:79:f5:32:98:ec:78:80:
b2:8e:b1:ca:92:97:7e:36:f7:7e:f7:c2:a0:18:c2:b3:b0:f1:
ec:3d:e3:73:15:a4:60:6a:5e:13:fe:ed:11:bf:d3:e5:2e:2a:
5d:bf:b1:dc:a5:cf:57:44:2c:17:12:ca:91:40:45:19:24:ec:
ef:75:f0:eb:8c:1c:eb:40:31:fa:b7:0f:ab:4d:a9:91:37:80:
3a:10:90:97:c2:6b:29:95:2a:0e:a8:31:d7:75:89:bb:30:e1:
9c:e5:a1:e1:d9:60:e0:1c:41:c3:c6:5b:2b:44:be:a8:6c:62:
d7:7d:19:6b:17:51:e9:95:5c:e7:28:a0:97:72:69:ce:18:9c:
b1:13:77:26:14:9a:c4:a0:8f:5d:07:4d:d2:a3:c4:25:55:07:
3a:4e:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:33 2025 by rpki-client