Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier: tkm2TyJ9PaX+gVEbK5Dd1ANEK0Joe2SECBievgkHLds=
Subject key identifier: 8E:9F:C5:BB:E0:9C:E9:51:09:97:C0:60:60:FC:52:DD:EB:E2:66:A1
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 0197BBFDE4A3E61BB18AED0C6616634FB9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number: 0D19
Signing time: Sun 29 Jun 2025 14:01:07 +0000
Manifest this update: Sun 29 Jun 2025 14:01:07 +0000
Manifest next update: Mon 30 Jun 2025 14:01:07 +0000
Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=)
2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: fI817OPVM+Ui0tI6qpVoGxiIqMMaSQnYPejHj3AoTPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:e4:a3:e6:1b:b1:8a:ed:0c:66:16:63:4f:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Jun 29 14:01:07 2025 GMT
Not After : Jun 30 14:01:07 2025 GMT
Subject: CN=8e9fc5bbe09ce9510997c06060fc52ddebe266a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:cd:98:c8:86:48:bf:c2:84:5f:a8:e8:2a:
f4:7e:26:06:69:9b:48:e9:cd:86:39:62:c5:ed:d8:
36:3e:ab:73:3d:5e:b7:9c:3f:fd:ed:55:7c:a1:15:
ab:e0:1c:d9:79:26:ea:1d:ec:22:9d:76:61:8a:99:
b4:da:96:6e:1d:e8:17:cb:00:00:f9:29:9e:52:b4:
2d:0d:19:9a:13:3d:34:de:6a:c6:34:39:bb:53:ca:
7f:7c:40:87:66:45:46:ab:8e:c7:29:49:49:72:3a:
53:3e:ee:59:40:7d:de:6f:79:29:59:92:21:8b:a1:
c3:4a:fb:40:c4:7b:f1:8f:8e:99:c6:8e:46:94:85:
09:d1:e6:39:1e:c8:29:6d:d5:9f:69:6f:c6:9f:1f:
a1:8b:16:06:57:12:c7:8b:63:67:3d:f6:6f:d0:91:
1c:78:00:77:4e:e2:bd:8c:fc:91:c8:63:c1:de:6f:
c5:81:49:16:7b:63:d2:40:35:eb:16:07:0c:65:e1:
02:81:f7:92:b0:3b:6d:90:09:e0:9a:a0:31:32:eb:
ff:52:85:c6:76:db:2a:af:8e:00:bf:42:19:26:53:
c6:df:9a:99:54:7e:d4:02:22:ac:29:0c:73:68:a1:
e1:61:07:4a:76:73:78:7b:32:3a:f4:62:7b:0c:dc:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:C5:BB:E0:9C:E9:51:09:97:C0:60:60:FC:52:DD:EB:E2:66:A1
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:3d:18:d2:12:e3:7a:6d:3a:50:65:2b:58:56:35:9f:55:
93:ff:f4:3e:f9:e6:ca:06:07:53:30:35:2a:94:13:76:f5:3c:
04:cd:07:af:54:b1:c7:0d:42:fb:a1:9d:11:38:b6:4b:61:90:
ab:c9:ab:01:33:e0:94:1e:59:b7:8e:ea:50:53:f0:62:93:ea:
e8:72:80:d0:22:4a:17:2c:57:ec:d9:8e:b7:24:fb:62:19:b6:
dc:4a:85:6b:0a:ad:73:2e:b0:0d:61:de:b5:64:24:77:fc:0a:
de:60:14:69:45:2b:c7:68:e3:47:5c:62:6b:8a:23:d6:cb:0a:
41:7d:95:bc:7b:b5:56:c8:4f:ad:cc:e7:d7:b1:3c:06:6b:ba:
d6:c7:db:58:3f:2f:a8:a5:42:53:53:a6:8b:f1:b3:30:59:6f:
69:99:3a:b8:e8:54:15:df:37:f6:d7:cb:21:04:f7:b8:50:d4:
d8:4d:94:a7:f3:84:a5:e3:b2:76:e4:87:d4:f4:26:ea:35:21:
fb:af:1d:62:16:07:a9:db:5d:26:53:e3:12:fe:ae:00:41:e8:
20:60:89:52:77:40:55:50:20:b4:c8:4d:4c:34:19:d8:9b:60:
72:56:e3:8a:d1:43:ce:a1:98:0a:c7:ca:27:c9:de:22:6a:36:
85:67:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:09:06 2025 by rpki-client