Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: QeST+I6wvM6PzNmjRILQtIfpOJFQmFUtHrW7oBao1jQ=
Subject key identifier: 98:ED:C3:6F:15:39:07:D8:AC:04:F1:CE:0C:AD:2D:E1:65:76:0C:F3
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0197C64A6F9BA2DD008405E254AAF125DD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 14:00:56 +0000
Manifest this update: Tue 01 Jul 2025 14:00:56 +0000
Manifest next update: Wed 02 Jul 2025 14:00:56 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 7tscFPnGsIKdhkrhOah+O2//qzUXbPBq6nu3dgR6/o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:6f:9b:a2:dd:00:84:05:e2:54:aa:f1:25:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jul 1 14:00:56 2025 GMT
Not After : Jul 2 14:00:56 2025 GMT
Subject: CN=98edc36f153907d8ac04f1ce0cad2de165760cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:1e:f6:d1:d4:f5:26:ec:17:15:0b:50:99:
58:1a:1c:ce:ec:04:0b:9d:9f:88:4c:87:c2:40:77:
d2:3e:24:b6:9b:0e:82:83:02:1d:67:2a:74:c3:38:
86:77:70:36:22:19:c6:1e:4d:3c:3d:83:30:be:51:
cd:fd:2c:e8:69:d3:f8:54:47:35:60:8c:a2:2a:1f:
05:68:f5:26:c3:f8:27:3b:11:8f:26:e5:c9:38:6f:
19:f3:d5:69:0c:3e:7b:c5:72:1b:fa:37:2c:fd:49:
7a:9a:86:e2:fa:2f:c4:ef:89:3c:c8:7c:25:f8:5e:
3e:59:1c:1f:f6:d0:82:b5:2d:54:23:c1:77:3d:02:
10:a9:68:a5:4b:4b:00:12:b5:6c:16:b6:cd:d9:9e:
28:18:82:52:77:d1:0e:ef:ee:13:05:11:ae:10:73:
ce:21:8c:f3:a1:ef:03:bf:9d:d5:49:9f:91:0b:8b:
f1:96:f4:36:af:17:7f:36:97:9c:c6:da:f5:ba:fa:
9c:f7:0a:a2:55:ae:85:31:da:17:22:b3:0d:c3:f9:
27:71:87:7a:20:4d:b3:8e:17:b7:63:b8:33:b9:ee:
3e:9d:b9:0c:db:0e:80:66:5b:c4:46:54:6d:27:17:
bc:09:05:4b:5a:56:33:11:e0:64:48:d3:22:77:03:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:C3:6F:15:39:07:D8:AC:04:F1:CE:0C:AD:2D:E1:65:76:0C:F3
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d4:2b:06:11:3f:d5:a9:ff:e4:77:7c:c1:fd:75:30:f8:1a:
c2:48:92:67:a4:7e:24:7a:f0:3f:65:46:5a:63:be:4d:5a:a9:
e5:d9:f3:32:5c:84:ea:1e:15:42:76:58:76:e4:e3:f5:5c:1b:
89:c6:0a:12:5c:42:d9:a7:6d:c5:67:4b:cf:96:6a:60:15:8f:
1f:54:e3:a3:ad:64:9a:49:e0:02:72:92:a9:86:51:9d:5e:d6:
47:a4:4a:46:48:3e:98:62:5f:04:ec:0b:cc:07:c6:13:30:90:
ee:f8:ed:e2:83:c4:68:14:1a:67:dd:58:4e:be:ce:c7:fc:be:
48:a7:ac:c1:28:1a:97:74:ec:ef:20:6c:b4:b4:a0:b5:97:4b:
5d:6a:52:ce:66:cd:fe:45:7b:df:f2:d7:14:94:59:2f:76:46:
1c:f0:c0:98:ae:1a:e0:c8:bb:fd:22:d7:53:b4:d7:72:d7:a7:
e0:8b:a9:7c:1b:19:6d:6a:21:d4:89:3b:3c:77:c4:48:f6:87:
6f:63:3d:ed:cf:0c:91:b7:d8:5e:5c:08:c3:db:58:18:23:07:
b3:c9:71:11:1d:c1:50:8c:88:80:2f:44:08:b1:75:bd:e8:e8:
ae:06:6c:d5:1f:9e:64:41:a9:cc:24:16:64:3e:7b:1b:a9:f7:
cc:73:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:24 2025 by rpki-client