Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: CB3KKwGhn5WkSQj4oTqDdvN23nnvnuTAzmlhtRdW1bk=
Subject key identifier: AF:4A:87:FA:B0:2D:A4:55:D3:AD:EB:49:A4:78:A5:6B:2C:AB:40:C9
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0197B5FBCC9DBF84DB2592062B1016F79AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: g2Q25P/1naLiENQgBrKSyksAv/4yJKax4LzbVr+zYj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cc:9d:bf:84:db:25:92:06:2b:10:16:f7:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=af4a87fab02da455d3adeb49a478a56b2cab40c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:b6:c5:fc:92:06:27:8a:68:e1:60:2f:99:
a2:1f:d1:4f:d9:b4:be:73:1c:e6:df:8f:65:9b:a7:
b1:12:55:18:98:d7:d1:99:21:79:f2:20:9f:03:67:
9c:fa:21:26:bf:fd:da:0e:00:3b:ed:63:ea:cc:17:
ef:4a:4b:aa:be:6a:72:20:8b:d7:ed:43:98:e2:04:
3f:26:1a:e9:4c:c1:a9:fd:b5:54:02:f5:3b:45:72:
4b:3e:7c:97:cf:7b:a4:8a:ce:bd:a3:49:b9:cd:c2:
57:09:1b:77:9b:b0:5b:0e:e3:11:b6:df:b4:da:9c:
e3:52:d5:0c:44:a7:1e:c9:a9:08:32:cb:5d:ed:b5:
10:08:a1:29:91:19:a0:df:37:22:fc:15:d0:7a:c4:
61:32:fc:61:44:97:ff:a6:a5:3b:2f:69:da:f5:53:
c3:2a:56:a5:82:31:6a:cc:5b:c5:7b:54:68:a6:e2:
c5:f6:e1:e2:fd:84:a7:b8:ad:01:9f:4c:1c:92:f5:
c9:b7:f4:0c:17:89:7c:0c:97:7e:30:d7:6e:f6:48:
92:84:0e:09:e3:14:29:bd:ab:2d:9f:1b:28:17:9b:
e8:22:bb:2e:bf:6c:eb:b6:ab:fe:11:2d:73:3b:d3:
19:1b:01:d8:e0:00:c6:5c:ba:7f:c0:ad:84:0d:05:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4A:87:FA:B0:2D:A4:55:D3:AD:EB:49:A4:78:A5:6B:2C:AB:40:C9
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:31:2e:45:81:71:2a:cf:d4:c1:14:cf:f7:b7:73:75:52:
03:f8:2b:3b:2f:cd:f4:d7:ff:48:a8:14:65:03:0d:70:a3:8c:
86:64:5d:2d:c2:e3:57:8c:7e:70:14:82:89:1e:e9:4a:3e:e0:
ff:6f:0d:37:64:d7:2a:84:34:ca:e4:b9:3c:c7:bb:76:43:70:
28:6d:35:38:e1:98:5b:1c:75:5d:4c:4b:92:f0:18:1d:47:4f:
08:cf:22:92:cc:a3:3a:1a:96:d1:15:db:06:77:71:3c:ef:e3:
d9:0c:a4:c0:1c:53:25:d2:5b:c1:f6:8e:ab:87:d2:01:07:fa:
4d:f3:a5:db:14:e1:68:22:e0:e6:64:e0:a3:fc:db:a1:53:d7:
bb:ec:6b:be:d2:1a:73:84:38:c7:03:da:e3:db:75:f9:7d:eb:
ca:e3:b1:76:c4:0d:a8:b7:cd:51:8b:b7:c9:59:ef:58:b0:94:
0f:fc:14:07:8e:ab:d1:58:50:87:81:2e:af:61:0d:56:bf:3c:
df:89:bd:a0:de:11:cb:c5:c9:51:46:5f:e0:b8:20:0d:57:5c:
90:d3:71:09:2b:06:f7:39:b3:97:f9:c5:ae:15:ea:6e:e6:55:
26:39:3d:28:32:f0:34:b7:87:a8:ce:93:7e:38:ca:76:32:37:
bd:c5:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:48 2025 by rpki-client