Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: /76xAbzQgWgxFOpqIDe1UyRmF6hDBwRkPb4Qj4NbN58=
Subject key identifier: 4B:68:43:27:42:35:6E:15:C4:48:7F:27:4F:C4:7E:A2:58:4D:46:E8
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0197B5FC5DCEDD25683C329AF729D5E9DDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1465
Signing time: Sat 28 Jun 2025 10:01:44 +0000
Manifest this update: Sat 28 Jun 2025 10:01:44 +0000
Manifest next update: Sun 29 Jun 2025 10:01:44 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: CrAYxGmlNgvCrxDOm0UsCEpnl5lHQSkv6Vd87hl7prM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:5d:ce:dd:25:68:3c:32:9a:f7:29:d5:e9:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jun 28 10:01:44 2025 GMT
Not After : Jun 29 10:01:44 2025 GMT
Subject: CN=4b68432742356e15c4487f274fc47ea2584d46e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:bb:ba:4b:99:8a:99:7e:36:2b:ce:c4:4c:
a6:c0:00:38:b5:39:14:e4:26:79:8b:78:90:ba:ae:
32:cd:25:28:2b:4c:ca:2d:be:18:40:d9:0f:e0:e8:
b9:64:14:17:56:7d:bc:03:25:53:dd:8f:db:1d:85:
84:a4:27:e6:a6:5a:90:03:c7:e9:8d:6c:d9:83:86:
84:2d:b4:05:f8:c5:92:ac:4b:e1:4f:72:53:1f:93:
f5:b9:17:31:b0:a5:cb:e1:97:d4:f5:4d:98:ec:54:
12:4b:29:8f:bf:1c:ec:4e:e9:2e:11:28:bd:ba:42:
26:0c:b6:28:ab:10:9e:e1:a8:ed:ed:29:50:1d:2d:
2d:fd:fa:0d:28:55:d9:8b:75:e4:91:63:e1:3b:77:
49:3b:1a:24:05:7d:72:51:07:91:4e:57:13:bc:82:
6c:58:60:13:60:79:b0:e9:78:79:99:64:41:a8:3f:
eb:8b:6c:41:b6:bf:89:99:80:a1:8a:7f:8b:00:9f:
7f:2a:9a:00:ac:a3:48:af:89:0a:8b:77:a9:e5:8c:
85:3f:e5:b8:5e:1c:23:48:a0:41:5c:aa:67:b5:36:
82:ff:7b:50:eb:b3:54:04:cb:8e:e2:05:dc:a2:21:
4e:ec:47:cf:2f:84:d7:94:80:36:12:29:44:90:a1:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:43:27:42:35:6E:15:C4:48:7F:27:4F:C4:7E:A2:58:4D:46:E8
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f1:14:5e:67:f3:8f:2e:33:79:88:79:a9:ed:d3:53:60:ec:
58:b8:10:75:2d:ba:ea:30:d8:6a:84:a6:55:29:56:99:0e:c9:
9b:79:1f:c3:26:89:46:76:6a:d6:41:f8:50:33:a7:8d:82:3c:
69:9f:6e:9b:5b:5b:0a:52:2d:de:11:0e:f0:6e:95:ad:f9:da:
ba:70:ea:60:76:20:bd:a3:f2:51:d1:44:87:98:5b:71:83:3e:
6a:53:9d:8d:a7:ec:1f:a4:cb:65:cd:10:e2:8c:07:db:ec:4a:
a9:bb:bc:aa:31:2f:0b:d0:80:78:86:43:e1:5f:b8:79:0a:91:
04:9e:5b:2c:c2:5c:63:be:9c:02:34:5f:54:c7:6f:7c:fd:a8:
db:81:73:0d:b0:b7:52:cc:4a:bf:d2:80:a5:c1:31:e3:7e:48:
f3:b8:92:17:ed:84:be:dc:e0:d2:b6:c5:29:6c:09:78:d3:c2:
9a:3f:24:f8:14:4e:d1:b9:68:07:a3:b1:d6:fb:83:11:89:95:
45:2f:93:1a:2d:f2:ed:e7:7f:15:26:3e:fe:f9:12:69:d2:f6:
6a:48:e5:45:43:aa:23:ce:a6:8a:7c:38:2b:68:d4:9f:78:17:
da:10:22:c1:2c:c4:a4:19:e7:b6:d8:e8:7c:9f:76:84:e9:15:
58:77:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:39 2025 by rpki-client