Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: qaoWlusUOL4lrXidW8/Xja47ynm0OT/qq421Zk3681c=
Subject key identifier: 17:D6:BF:DC:35:BD:1E:69:92:DB:CC:32:D0:C8:9A:9A:18:30:AE:7E
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 0197B6A2286DC831FC5087EAD1B38FA0A613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 095E
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: Sr/J7a1zEV9OPNFn6ih4+armLum2SQFk56wAmSoWslM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:28:6d:c8:31:fc:50:87:ea:d1:b3:8f:a0:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=17d6bfdc35bd1e6992dbcc32d0c89a9a1830ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:22:6c:9d:fb:d7:72:45:25:0c:51:9b:52:
6e:c9:e8:16:34:fa:45:76:28:a6:eb:90:39:1a:70:
dd:70:0e:5f:3a:ff:ee:78:50:6d:8a:17:f6:b9:6f:
e1:73:08:e8:a7:fc:5b:8a:81:3f:59:09:2a:4c:9b:
ca:03:ee:59:ab:a6:8e:a2:5b:b8:bc:6c:9f:7a:aa:
c4:15:6f:4d:5b:9a:30:50:8f:56:9f:bb:0f:32:e4:
9e:fe:28:83:c7:6c:c5:82:05:f2:44:95:fc:38:9e:
74:99:35:cf:f2:3a:c9:91:a2:26:d4:f2:15:c1:f3:
d4:46:86:59:dd:0e:82:6a:e7:5a:8d:b8:3f:e4:e4:
ac:67:ca:41:18:ab:ed:98:fd:99:1b:4c:b0:9e:6a:
ac:86:72:b4:02:35:1c:3d:50:8f:a1:51:3d:2b:e4:
9a:a7:4e:19:f7:6d:0e:d0:d1:25:07:d8:0e:28:db:
ea:09:6f:57:3c:5a:c1:2e:59:20:b2:4e:ac:c8:1a:
72:91:fe:d7:2d:9c:05:2b:69:95:b7:ae:c1:6f:e4:
55:17:dc:fc:b7:16:da:f2:24:ef:6e:ca:94:a6:a3:
3d:96:76:1c:47:eb:68:b1:bb:80:b1:b8:be:73:a5:
7b:92:b7:40:d7:c5:36:c9:72:11:e4:e4:50:66:a9:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:BF:DC:35:BD:1E:69:92:DB:CC:32:D0:C8:9A:9A:18:30:AE:7E
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a6:0d:39:11:93:03:26:c3:1c:13:cf:b8:da:32:ae:b7:47:
59:5c:aa:af:7f:90:c0:e0:1d:fd:17:8b:9c:f0:bb:86:dc:82:
8a:90:17:b0:02:25:d8:76:f5:d0:4c:9d:7c:22:bf:be:8b:f9:
30:0d:04:d4:7e:fb:c1:a4:5b:04:34:fc:a4:ca:31:a7:85:aa:
73:50:92:bc:d3:6b:03:16:ee:ea:1f:da:86:37:b4:23:fc:5e:
bb:cd:f7:82:a7:e7:c1:7a:46:c0:ac:f9:81:f3:4f:b7:51:09:
d4:5d:12:28:70:d5:83:98:84:ff:d6:47:ae:4c:f3:37:7c:d2:
2c:d3:a6:36:0b:36:60:c5:5c:7a:c4:b3:56:34:aa:55:f2:f7:
d0:cc:27:45:7f:82:0e:99:0f:01:69:f6:f5:41:f9:95:95:85:
83:db:95:7e:82:7f:3d:28:17:01:e8:96:80:3d:af:be:d4:56:
9d:04:69:a3:f6:e0:f9:09:45:48:5b:b2:58:bc:81:9c:62:6e:
5e:3a:82:28:78:ee:73:0b:d4:87:28:b8:bf:c4:1b:ad:78:49:
9c:eb:24:f3:79:83:30:93:da:d4:e4:a6:27:fa:eb:71:35:dc:
99:c1:0f:66:c1:7a:cf:fd:64:3c:c8:2d:b9:ba:ee:cd:5e:28:
78:88:6f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oihtyDH8UIfq0bOPoKYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4Y2M1OWQ5OTRhYzg2MGU1YjI1ZTA5NTc1ZDk5Zjk0Mzcw
ZTkxY2IwHhcNMjUwNjI4MTMwMjQ5WhcNMjUwNjI5MTMwMjQ5WjAzMTEwLwYDVQQD
EygxN2Q2YmZkYzM1YmQxZTY5OTJkYmNjMzJkMGM4OWE5YTE4MzBhZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXcibJ3713JFJQxRm1JuyegWNPpF
diim65A5GnDdcA5fOv/ueFBtihf2uW/hcwjop/xbioE/WQkqTJvKA+5Zq6aOolu4
vGyfeqrEFW9NW5owUI9Wn7sPMuSe/iiDx2zFggXyRJX8OJ50mTXP8jrJkaIm1PIV
wfPURoZZ3Q6Caudajbg/5OSsZ8pBGKvtmP2ZG0ywnmqshnK0AjUcPVCPoVE9K+Sa
p04Z920O0NElB9gOKNvqCW9XPFrBLlkgsk6syBpykf7XLZwFK2mVt67Bb+RVF9z8
txba8iTvbsqUpqM9lnYcR+tosbuAsbi+c6V7krdA18U2yXIR5ORQZqkRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfWv9w1vR5pktvMMtDImpoYMK5+MB8GA1UdIwQY
MBaAFLjMWdmUrIYOWyXglXXZn5Q3DpHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU14WjJaU3NoZzViSmVDVmRkbWZsRGNPa2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82OWM4ODAtMjNlZi00OWMwLWFkYmYt
M2QxMTNkMzlmNzdiLzEvdU14WjJaU3NoZzViSmVDVmRkbWZsRGNPa2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82OWM4ODAtMjNlZi00OWMwLWFkYmYtM2QxMTNkMzlmNzdi
LzEvdU14WjJaU3NoZzViSmVDVmRkbWZsRGNPa2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKYNORGT
AybDHBPPuNoyrrdHWVyqr3+QwOAd/ReLnPC7htyCipAXsAIl2Hb10EydfCK/vov5
MA0E1H77waRbBDT8pMoxp4Wqc1CSvNNrAxbu6h/ahje0I/xeu833gqfnwXpGwKz5
gfNPt1EJ1F0SKHDVg5iE/9ZHrkzzN3zSLNOmNgs2YMVcesSzVjSqVfL30MwnRX+C
DpkPAWn29UH5lZWFg9uVfoJ/PSgXAeiWgD2vvtRWnQRpo/bg+QlFSFuyWLyBnGJu
XjqCKHjucwvUhyi4v8QbrXhJnOsk83mDMJPa1OSmJ/rrcTXcmcEPZsF6z/1kPMgt
ubruzV4oeIhvZw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:21 2025 by rpki-client