Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: HaU/sc3XteQbbZs2NLUMUgUjpY1XwF8UhCZzmIfWxpg=
Subject key identifier: 02:42:C7:DE:1B:9B:90:EC:79:FD:9B:9E:B0:6F:6B:6E:F8:9C:6A:1A
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 0197B96B048597AA1471D98C2CDC8E70BFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 08D0
Signing time: Sun 29 Jun 2025 02:01:27 +0000
Manifest this update: Sun 29 Jun 2025 02:01:27 +0000
Manifest next update: Mon 30 Jun 2025 02:01:27 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: TjPVSCs5OJDkt4ihDIkhHD+USUwc0g0NyZhR92xHD+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:04:85:97:aa:14:71:d9:8c:2c:dc:8e:70:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Jun 29 02:01:27 2025 GMT
Not After : Jun 30 02:01:27 2025 GMT
Subject: CN=0242c7de1b9b90ec79fd9b9eb06f6b6ef89c6a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:c2:bf:bf:21:7c:54:5b:59:e6:dd:15:7a:
65:1a:68:5f:6b:50:92:58:fe:ad:4d:21:27:33:c6:
85:b7:37:a5:d7:8d:f8:eb:fb:91:c9:67:87:8a:21:
4d:dc:6b:bb:fc:0b:98:aa:6e:51:7a:aa:6a:ee:a3:
56:80:46:16:44:ba:09:70:72:68:24:20:ef:85:a4:
90:87:a2:ff:77:83:36:ef:5c:75:e2:d1:23:a6:50:
da:67:7d:9d:9c:40:7f:d7:52:ed:fd:dc:e2:59:4f:
0c:df:17:88:51:d4:0c:36:5a:08:dd:a9:a8:87:6f:
9b:fd:22:10:4f:87:13:de:ae:8d:2f:b7:11:e1:ae:
c0:e7:7e:0e:5f:9b:7a:9d:4a:2d:0e:10:f4:0e:9c:
ba:eb:5f:17:17:d4:b5:27:1e:2e:9e:13:e8:d9:ee:
a5:4b:37:2a:f9:83:81:9e:c7:50:ba:3b:02:c7:6c:
39:1d:8d:cd:91:ce:ca:b6:a7:b6:ff:ef:1d:c5:fb:
45:75:c5:c8:93:62:62:ca:34:b6:76:23:5a:f2:ee:
6a:0e:d3:d4:49:ed:7c:ff:3d:be:0c:1c:e0:0e:e8:
54:86:44:cc:90:ac:29:58:c3:2f:56:c1:f5:be:f7:
2a:47:a5:7f:c1:a8:60:92:b1:cf:da:35:a4:a7:f6:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:C7:DE:1B:9B:90:EC:79:FD:9B:9E:B0:6F:6B:6E:F8:9C:6A:1A
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:97:85:0d:1d:e5:6b:4c:3d:14:5f:8d:23:00:3b:bf:ec:
eb:e6:41:b9:7b:ae:63:b8:de:65:59:48:38:69:b7:e2:f9:49:
94:11:d6:52:61:e1:82:48:a4:76:10:b6:ed:3c:33:12:04:28:
7a:64:22:c2:c5:0d:59:7c:33:0a:80:1e:90:af:5f:9b:8d:42:
69:f2:6f:99:d5:ee:fd:c0:e1:a6:4b:90:68:46:51:e8:43:d3:
26:4c:63:35:c2:71:01:6f:68:c9:10:1d:eb:f6:ce:fb:a8:1f:
af:07:c5:18:b9:be:7f:62:f8:e5:b1:e8:a3:0d:a3:d9:a9:79:
93:3e:70:06:73:c9:3d:e5:a8:33:4a:f8:4a:d8:cf:46:22:db:
82:40:2f:76:9b:8a:44:70:b7:7d:e4:0e:80:32:97:33:ae:85:
51:83:b5:4e:35:6d:da:1f:93:d6:9e:be:e1:0b:ab:64:ef:2b:
76:05:9d:5f:5f:70:f2:c4:09:c6:58:86:04:c6:47:49:d2:84:
6d:fc:e7:02:33:1e:3c:ee:d2:60:77:86:7a:01:c3:eb:26:4c:
ce:2f:7b:2e:50:6f:63:08:78:5a:0c:7e:39:87:c4:eb:ac:bc:
c5:cd:cb:6c:9a:6e:1f:de:b9:e2:c9:22:8f:64:04:3a:61:fc:
d4:3f:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:17 2025 by rpki-client