Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: gHl0hmz7IVbS63Tt2DGcQSLuNTN8cCp7Ri6UXyBT2Yk=
Subject key identifier: A6:E7:09:4D:9A:35:69:5C:66:F4:5A:30:EB:82:A8:72:1D:86:B6:AD
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 0197B7EA79D4691C47B03D01E771C00FC742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 10A9
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: BKCx4lX3aHBGrrWnooarUO1R5XNWPuinSvLZjfpA/tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:79:d4:69:1c:47:b0:3d:01:e7:71:c0:0f:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=a6e7094d9a35695c66f45a30eb82a8721d86b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:ec:42:74:c2:51:85:0f:5a:37:6b:b2:dc:
88:58:ca:9a:6c:dd:ac:d6:d2:68:3f:cd:40:85:7e:
4b:3f:ea:3b:66:c6:de:2a:9e:d6:22:35:b5:33:78:
3c:1c:dc:eb:62:f0:f3:c7:47:2e:fc:2f:ca:74:25:
f9:ff:03:42:e8:41:df:85:b7:ea:e1:d7:75:a5:27:
a5:ad:37:d6:af:2c:56:04:67:08:d2:52:db:fe:0a:
2b:33:70:45:64:71:d4:ad:b5:52:0b:b9:e7:92:cf:
d2:f6:18:97:3a:43:ea:e2:cb:d6:86:c0:f6:74:82:
10:a4:3f:dc:86:e8:0d:7a:da:6b:5d:34:c8:d0:f9:
e5:b9:58:6b:0b:6b:53:1a:a8:e2:3e:84:0e:44:b1:
5a:14:70:d4:55:0a:7c:28:48:fe:c8:55:ac:3b:5a:
b2:80:6c:a3:de:60:0b:d9:0e:87:32:b9:c3:2e:0d:
d9:63:b6:d5:7a:7c:60:0b:d0:9f:5c:2d:ac:df:f5:
69:61:f4:55:1b:79:62:fa:90:61:43:64:ca:44:c4:
c9:a2:b0:b9:3b:68:be:82:ad:8b:81:0e:83:6f:7f:
6b:9b:16:c0:47:05:b5:23:f7:c2:a2:f7:ee:6a:94:
1d:fc:82:a0:16:95:e8:55:16:cc:85:85:5d:59:8f:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:09:4D:9A:35:69:5C:66:F4:5A:30:EB:82:A8:72:1D:86:B6:AD
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:f0:09:d5:81:05:f4:59:da:f1:74:42:4f:fc:01:24:10:
3e:31:98:10:49:31:6b:43:55:5f:e4:77:41:d3:4d:c3:a1:4a:
0f:22:5b:f4:cd:72:09:b7:a7:f4:e7:a6:d1:bc:03:88:e2:fa:
0f:a7:32:8a:5d:c9:cd:72:75:04:5a:1e:f8:68:90:e9:c6:41:
7c:ec:70:4c:07:1c:8f:04:2d:73:b4:ca:ef:0b:4d:93:73:f5:
7e:1c:1e:09:56:59:3d:30:31:f4:f6:4c:6c:48:76:b7:3d:7e:
8a:2d:0f:9c:92:af:15:5e:c0:d8:56:34:c3:42:77:b0:e5:c3:
2d:cc:79:10:c9:9f:19:28:c4:06:c1:1d:4f:30:a2:43:0a:2d:
47:d7:c4:67:29:68:66:7d:89:0f:cc:a5:82:ec:29:5d:d3:42:
c7:8c:33:b9:b6:b3:93:28:83:ad:19:d1:88:e1:ed:b1:40:53:
65:06:4a:21:84:33:bb:b1:aa:a2:f4:2d:07:41:01:5b:f2:af:
98:cf:82:f1:4f:99:02:48:51:39:d5:cb:f5:64:b7:fe:2d:3e:
3a:5b:8a:19:93:fd:ee:e8:20:6c:2c:bf:06:2d:aa:8a:54:f2:
b0:4d:31:6e:7d:1c:09:6c:3a:b8:12:de:fa:11:15:21:9d:cb:
6a:45:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:12 2025 by rpki-client