Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: oLAv5vfJJCFTCz+LxF95dzZlly9bc7ThE7GvXxLuUE8=
Subject key identifier: FA:F1:9C:1D:F1:21:86:28:5D:DC:40:E0:14:C1:05:E5:5A:BE:61:00
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0197B6D73777B52EB3B36D01AC4E34EBB66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0E2A
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: Yz+pwzjVQZRYwzAypnhpBPMthiK5zhEd1EmWdcKLjW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:37:77:b5:2e:b3:b3:6d:01:ac:4e:34:eb:b6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=faf19c1df12186285ddc40e014c105e55abe6100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:fc:25:b0:de:4a:45:0b:96:0e:f4:aa:14:
0e:b4:77:95:ca:63:b9:32:41:b8:59:60:1b:a1:b7:
42:2b:1c:f5:5a:62:eb:a9:b9:79:b1:07:4a:2f:bc:
9a:38:25:3e:29:ba:05:24:96:26:39:27:12:8f:8c:
a3:ff:ae:c4:92:59:13:68:a7:ec:c5:29:54:33:16:
e6:27:14:ce:9e:72:5c:d7:2c:a6:f8:48:37:24:1a:
0b:bf:a8:ed:ee:e1:67:10:3b:90:90:c1:f4:63:86:
34:d3:8f:7a:7e:ec:e4:b4:13:07:71:02:ec:4a:1f:
ff:fc:c0:a4:35:e1:59:50:bd:21:80:6d:3f:58:6a:
ca:cd:0f:9a:ee:bf:d2:37:20:39:dc:03:e9:33:02:
a3:04:1d:a5:bd:16:43:56:ad:31:8e:ca:16:cb:6d:
bc:6c:77:5e:bb:56:90:51:de:4c:73:89:cb:fa:b7:
c6:4f:58:96:30:d1:58:a0:39:36:45:bb:08:42:9e:
41:3f:1d:2d:c4:8b:22:b6:47:7f:62:39:4a:f3:0d:
3e:af:de:a6:05:64:85:f0:95:03:7f:3d:f9:8e:2a:
43:41:f1:4a:b9:42:3b:1f:64:04:a4:1a:cf:94:c3:
ee:50:58:36:fa:10:31:0d:32:0b:d8:43:06:e7:f4:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:9C:1D:F1:21:86:28:5D:DC:40:E0:14:C1:05:E5:5A:BE:61:00
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:a0:fc:6b:4b:c9:d3:99:85:40:33:4a:ff:7c:89:9d:4d:
74:34:44:d4:74:9e:c3:72:d0:3b:b4:9b:90:56:19:39:b6:7f:
aa:91:b0:20:4f:4d:42:df:4f:08:61:22:02:eb:e5:76:88:79:
87:b4:3d:3e:12:61:49:83:06:ce:b6:20:96:c3:df:3e:12:78:
48:7a:7d:72:fa:76:a2:d5:80:21:8d:b7:6d:0e:62:7b:31:cd:
c7:7f:7e:da:01:98:f5:24:fe:64:8b:cf:c4:69:f9:f5:07:4a:
56:dc:47:5d:9f:ae:82:26:e4:40:84:47:9a:e6:13:dd:3b:c7:
88:72:ca:34:9d:75:f9:d2:8c:2b:00:b9:6a:d0:83:5f:0c:49:
71:1c:0f:2c:66:27:9b:10:32:a1:3e:80:67:05:cb:a5:6a:47:
d2:76:05:b4:d3:e6:0c:92:b1:16:3a:5b:64:ca:f1:4a:2a:1b:
be:53:7f:45:04:25:70:42:7e:aa:d1:43:15:19:53:8b:1a:dd:
be:ec:94:78:bb:b5:0d:42:8f:33:a0:84:38:fb:a5:ff:d2:01:
24:f0:bf:bb:96:ac:9e:cc:5c:17:1a:5a:17:7a:e6:6b:45:85:
7b:1a:48:12:77:11:c6:8b:e0:09:ee:91:39:92:f5:d8:98:52:
31:19:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client