Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: aKUgYE4CfIVF8IGK/3/JfuIookOC5veAEusRBX76rak=
Subject key identifier: 29:70:86:E0:C0:48:F2:DF:BE:34:EF:B0:A4:8B:07:5C:3D:BF:E9:3D
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0198D884557A05E4204E7950386612F2A83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 20:00:07 +0000
Manifest this update: Sat 23 Aug 2025 20:00:07 +0000
Manifest next update: Sun 24 Aug 2025 20:00:07 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: PEnjLiAHT0fofvWkxUSszagIP4/V2mLl7c4sTLNf3Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:55:7a:05:e4:20:4e:79:50:38:66:12:f2:a8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Aug 23 20:00:07 2025 GMT
Not After : Aug 24 20:00:07 2025 GMT
Subject: CN=297086e0c048f2dfbe34efb0a48b075c3dbfe93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:44:7d:bd:1d:2d:cf:33:6c:ea:ff:16:84:
df:de:78:cb:9a:03:1a:4a:f7:aa:ba:91:16:53:f5:
b8:0c:a8:b0:19:3b:36:ce:2d:a0:f2:8e:5b:48:c3:
24:69:ca:c4:d7:60:8b:db:5d:a7:5e:6d:a8:68:5b:
a9:51:aa:2a:a2:31:62:23:70:e4:b9:1f:3e:1f:b1:
62:33:9f:34:eb:5f:06:00:1f:0f:08:0b:b5:2e:08:
42:c3:d4:cc:8b:f7:6c:45:b1:38:ec:7c:30:7a:c3:
10:59:bf:15:69:b2:82:ec:c7:50:1e:4f:bc:71:63:
87:54:d2:fd:31:28:f7:29:3a:28:a7:f5:8b:a7:5a:
88:8e:99:9e:71:48:24:ae:41:f9:e9:69:08:00:e3:
33:5a:e3:a9:83:79:4e:cf:0c:5b:0c:5c:25:6c:12:
21:d2:41:6e:dd:cd:43:bc:bc:e0:7c:5c:b1:67:13:
6d:17:fe:fc:03:bc:9f:46:a6:6a:8d:a6:a3:8e:a5:
1c:0c:f2:1c:b6:78:86:61:42:de:0d:05:39:e7:22:
da:ee:c3:47:a0:21:f5:e0:96:ba:6e:80:3a:6b:6f:
37:05:81:f9:a9:09:7d:41:38:eb:e7:fd:11:5a:9a:
08:95:d8:dc:4f:8b:20:3a:16:f6:3c:65:48:1f:09:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:86:E0:C0:48:F2:DF:BE:34:EF:B0:A4:8B:07:5C:3D:BF:E9:3D
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:fc:6f:be:9d:cb:7c:a6:3e:c4:7a:99:17:5a:8f:37:d6:
a8:85:05:11:96:dc:9a:00:23:30:e8:66:52:36:d8:15:01:99:
03:3f:2d:43:23:03:9f:a5:4b:c5:42:d0:78:23:fe:e8:eb:21:
44:04:06:26:0e:7c:bc:dd:31:0e:f2:32:3d:2d:82:5b:35:c4:
97:c5:bc:50:3e:8a:7f:46:45:d4:1f:4c:1a:48:44:54:8d:1e:
b0:3f:ae:57:d9:a0:26:23:c7:b8:5b:57:31:12:b1:c7:5a:ca:
f0:96:db:fb:fe:77:21:f6:1a:54:5d:7c:10:ee:15:60:21:a0:
e8:d7:2f:cf:5a:35:16:9a:f6:f9:b3:c3:25:3a:2a:83:bc:32:
c2:b1:52:5b:19:c6:12:2f:f2:26:9a:2a:58:56:58:b8:fa:be:
6b:4e:e6:47:fb:64:5f:98:85:4c:0c:cb:2e:d3:20:5c:0e:98:
f8:e2:9a:11:f8:c5:5b:e9:1b:ff:4f:f4:ad:4c:bd:cb:e0:ee:
51:03:68:86:6e:c5:5d:4b:ca:14:ea:e5:43:e5:96:cf:eb:d7:
1d:98:06:e5:90:71:98:e2:21:7a:d9:64:d4:a7:12:7f:00:dd:
48:44:84:3a:3f:1f:28:4e:97:71:ef:f2:28:f2:84:84:a8:ca:
82:8d:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:18 2025 by rpki-client