Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: TCeM+yRw6RKw7ezU2AdumdUvshy/hTWwARenwF/Ge98=
Subject key identifier: C2:C0:2E:FF:9A:67:A8:61:5A:CD:9B:82:CF:5D:7F:D8:86:7C:E8:80
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 0197B6A1166038A297597AD8F35156C119C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0BE6
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: olb7v1O9LZPfYuxbzDJjviZithCaw/KQihVTDsCD7yo=)
2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:16:60:38:a2:97:59:7a:d8:f3:51:56:c1:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=c2c02eff9a67a8615acd9b82cf5d7fd8867ce880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:2e:b4:3a:64:13:d3:5e:0e:15:f2:75:79:
1b:4e:58:61:f2:f2:76:39:04:1f:2c:b3:f1:61:01:
04:4b:a8:3d:82:d6:87:7e:33:0e:2f:b5:bb:7e:5d:
a1:ff:e0:2a:c8:9b:43:81:93:71:db:1b:ff:76:c1:
4b:97:ac:b9:62:29:a2:c5:c8:07:44:64:c4:e1:fe:
c0:56:55:5b:66:e0:c3:69:e9:bf:94:1e:a9:63:f7:
76:6b:c5:22:28:d4:4e:74:26:94:3d:8c:5c:c3:8d:
7a:1c:20:e2:6d:de:31:00:e3:82:29:07:5e:6e:80:
5f:68:a5:79:54:bb:de:42:43:c0:b5:70:37:2d:16:
41:1a:b9:f2:3c:cf:4f:19:39:ac:19:17:db:c6:89:
69:74:41:85:a7:34:80:0c:25:b6:d8:4b:73:c1:5b:
89:ac:50:b4:3b:20:65:92:69:f0:6b:96:b7:0b:df:
94:6e:99:24:aa:55:73:bc:95:cb:68:72:cc:80:65:
c2:83:00:53:9b:81:a6:61:c9:43:0d:6f:1f:3c:56:
c3:a9:18:f3:b1:4e:e9:f0:8f:82:f5:6c:3a:c5:38:
ab:c9:05:56:6b:e7:2b:c4:6b:c3:13:ee:73:a0:0c:
99:01:f9:1d:17:04:74:ee:cb:3c:6e:0d:1f:df:a0:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:2E:FF:9A:67:A8:61:5A:CD:9B:82:CF:5D:7F:D8:86:7C:E8:80
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:52:36:80:02:65:3a:ab:bb:dc:e4:6a:5e:79:62:a8:73:
46:1e:a4:97:66:9e:45:e4:4a:34:79:e9:c3:0b:f6:eb:fb:e9:
3d:f7:a0:9f:99:6d:88:75:09:67:d3:f7:5b:c9:55:67:2f:ba:
00:23:68:d3:4d:f5:02:7f:37:0d:e8:3e:c9:6c:34:55:5e:07:
92:2d:d0:bd:4c:19:3d:bd:6d:98:2b:55:60:8b:35:43:2a:ae:
dd:9a:6e:c5:0c:93:a0:33:3f:6f:8d:f0:67:4e:fe:71:90:e6:
ea:7e:2a:60:74:eb:c3:94:4a:5a:24:bc:4e:04:f1:ff:44:c0:
80:34:12:3d:3d:81:70:f3:a6:66:5b:d8:78:23:8a:ab:e0:55:
5e:06:a9:1e:fd:59:55:1b:0a:96:91:af:fc:ab:ec:87:ed:df:
21:87:b0:4d:9c:fc:28:09:f6:90:19:8a:81:53:20:34:87:49:
44:3e:15:30:f3:d4:12:ff:b2:2b:f0:7e:f5:1c:26:f2:a4:95:
be:be:37:8a:8d:c5:d8:54:93:3e:6e:49:27:44:2d:06:77:c3:
0f:07:47:a7:ee:05:d7:63:04:8f:4b:bb:2c:a6:f8:72:bd:73:
18:5e:ff:d8:e6:b1:ac:eb:76:11:0e:bf:8c:0e:1e:2c:fc:72:
fe:53:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:20 2025 by rpki-client