Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File: uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier: yCrR6SL4lCRL4JPmPUQxyLiFgJ5FKeeaxuYyHCV9OQQ=
Subject key identifier: 3F:1B:24:6F:1C:64:B2:BE:38:60:5B:B7:98:56:19:02:C8:BE:D4:63
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer: /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial: 0197B6A22FB721BC046474B592AC7E70039A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: C6vMDXYYsFAB31m+TQO8rrEkNLB6LslLCzZedCXDW2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2f:b7:21:bc:04:64:74:b5:92:ac:7e:70:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=3f1b246f1c64b2be38605bb798561902c8bed463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:70:ce:18:93:b3:8b:2a:45:e0:5a:80:cd:
61:f4:29:18:85:73:e9:db:2e:4d:92:11:8e:6e:3d:
b4:de:d0:82:4b:9c:29:53:aa:10:7c:5c:2b:c1:1d:
90:28:9f:10:c3:25:21:32:cd:b2:6f:5d:cf:f5:9f:
5a:7a:f1:16:59:a6:db:3a:61:34:2c:4f:d0:ab:e5:
b8:65:0b:67:4e:1f:2a:63:7b:88:c7:ec:72:4a:86:
08:5b:8b:36:3b:df:42:93:ea:91:f6:d8:a7:12:11:
bd:a6:87:94:4e:b4:e4:99:70:05:b4:e8:04:0d:41:
d6:95:78:cd:98:fa:7f:d4:c4:17:08:50:75:a0:2f:
23:ba:b3:42:44:dd:4f:f0:3d:98:56:8e:92:17:3d:
41:97:ff:bd:15:9d:6f:ea:87:8c:18:a1:d9:d4:b4:
76:67:7b:47:ff:ca:d3:ed:06:12:c1:b1:b5:fc:71:
3a:b3:07:be:ea:b6:70:a4:62:b1:9b:fa:7c:81:68:
84:47:b6:41:99:b3:33:c3:4e:4b:95:40:c7:fd:07:
7e:ca:21:2e:c5:08:e0:09:be:ec:b7:9e:ff:d9:ab:
6f:ec:59:f8:08:41:be:69:cc:cd:17:2c:d5:f8:68:
7f:f2:8d:6e:04:1c:9a:7d:45:e5:ea:7b:fd:e6:e9:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:24:6F:1C:64:B2:BE:38:60:5B:B7:98:56:19:02:C8:BE:D4:63
X509v3 Authority Key Identifier:
keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:b6:64:f5:cc:49:6e:82:a7:a2:e3:2c:dd:3b:e9:17:42:
13:25:fe:c6:b4:90:55:32:3f:ef:60:4b:5c:31:8c:51:7c:0a:
6a:92:14:6b:2d:58:9f:05:0f:91:87:0d:7d:30:7a:eb:d7:82:
9b:da:2f:cc:d4:e3:3f:8a:52:ad:ba:1a:88:a2:be:00:fb:c5:
9b:97:f0:11:42:fe:63:a4:74:89:7f:42:7b:0f:69:1c:60:2f:
28:2c:8f:bb:bf:46:6e:71:a4:db:7b:90:43:92:f1:d6:a9:d5:
7d:07:81:e0:03:fc:23:a4:0d:54:6b:80:87:04:40:77:98:1e:
34:66:cb:b0:8e:e4:ae:e9:1d:c2:ad:bf:d3:b5:11:28:fc:61:
a5:ba:b6:f9:55:bf:10:0a:7e:8d:61:44:f8:9e:37:d9:94:ef:
49:6f:39:2f:cf:8b:2a:40:38:e0:50:35:54:ee:8e:29:3a:e3:
45:96:c3:d5:76:f7:3a:0e:10:bd:bc:f4:0a:a5:c7:d9:da:22:
e0:f1:6c:36:08:09:79:3e:3d:31:b9:32:7c:5a:da:b0:64:dc:
fc:9f:53:be:31:d7:4c:2b:d7:7b:a4:e5:5f:68:3e:a4:2d:85:
f3:12:aa:8a:38:48:1b:32:e8:e9:27:23:5c:2e:8e:65:78:b8:
07:3e:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:36 2025 by rpki-client