Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: ojqSVQzvYDDjbiXZWIFzMBH83Ymtpj1su3AXccIElKY=
Subject key identifier: 9B:DF:1A:12:24:54:DA:56:42:2A:25:4E:9D:88:71:96:E3:64:63:C3
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 0197C6147D3CAABEA7549B416A34272A396F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 13:02:00 +0000
Manifest this update: Tue 01 Jul 2025 13:02:00 +0000
Manifest next update: Wed 02 Jul 2025 13:02:00 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: 5RaBXR8bYvH4oI14Wj42tHK9/AYdhiAOyZaIKXUv2E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:7d:3c:aa:be:a7:54:9b:41:6a:34:27:2a:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jul 1 13:02:00 2025 GMT
Not After : Jul 2 13:02:00 2025 GMT
Subject: CN=9bdf1a122454da56422a254e9d887196e36463c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:97:66:4e:da:a9:4c:27:46:c1:72:0e:00:
67:31:ef:ee:60:8c:26:86:68:f0:49:68:64:4b:f3:
46:ee:9f:b6:61:0d:80:3f:8d:ac:5d:15:96:e7:a1:
e1:2a:6f:1b:c1:c2:94:c8:3d:f6:22:f9:c1:b0:f7:
bc:c6:a4:14:b9:dd:bb:e7:13:fa:a8:7e:f7:88:69:
7c:32:cc:cf:5a:c9:9b:8a:fe:4f:a4:35:78:0e:9d:
d8:30:ac:46:23:39:56:ef:f4:82:7c:ef:62:6f:68:
24:d9:56:05:4b:73:38:4f:bd:bc:94:2e:a9:be:85:
32:6c:ab:a6:86:8f:69:98:1c:9b:79:38:3e:fd:f2:
5c:1c:98:19:73:11:a0:60:56:ae:f0:53:11:56:ac:
e9:13:15:b0:0d:fb:3d:cc:50:68:8e:c2:c9:94:de:
e8:03:30:66:c4:3f:67:8f:16:e9:9a:80:47:28:ad:
10:54:39:8a:14:31:2e:a4:c0:9c:0c:40:07:98:a2:
0e:a0:0c:0f:ee:b6:98:65:85:27:5d:31:37:db:8c:
b6:9d:7e:69:fa:0c:e5:92:91:41:48:2c:1f:9b:8f:
21:82:e2:f2:ba:59:2a:b8:36:35:60:3f:b3:14:e5:
0f:2b:9f:2b:98:7d:4d:1a:98:03:48:3a:be:2c:66:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:1A:12:24:54:DA:56:42:2A:25:4E:9D:88:71:96:E3:64:63:C3
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:25:dd:14:46:d3:3a:17:d0:92:9a:0d:5e:e8:59:35:cc:74:
a7:1d:cb:f2:d8:6d:57:f2:35:8c:b1:44:fa:bf:d4:4b:94:8e:
22:4d:43:d2:8d:cd:01:e2:65:e8:3e:03:f0:46:0b:5b:73:2a:
20:a9:29:bf:50:7f:2c:06:b8:cb:54:a4:a5:67:46:8a:48:b6:
78:33:df:67:b8:c2:65:1e:14:f5:6a:82:f7:2b:b3:f5:5c:c3:
ce:29:50:c4:b8:e9:40:bd:fc:4f:db:3e:8e:78:32:d0:c8:17:
94:08:cf:a3:98:27:01:85:02:31:d3:f3:b7:ae:c7:c7:9d:a4:
d6:99:bf:b5:23:3b:be:de:4a:bf:97:80:14:9d:2c:64:0b:af:
e2:93:06:14:66:ef:d1:7b:c4:49:67:46:86:c0:af:e7:10:10:
fb:12:26:92:90:4f:7f:0b:1f:f9:29:19:80:13:b2:48:62:48:
5c:ca:e9:9c:2c:ad:69:87:32:1f:be:82:91:09:47:e0:1c:a4:
74:05:3b:fb:21:b1:48:e7:a1:f7:34:b9:f5:d4:5b:50:2a:64:
b7:1a:da:ad:2a:a1:66:a4:20:d4:f9:97:b2:44:62:bf:5a:17:
89:57:d2:37:84:82:bf:65:32:bc:a6:8c:04:97:6f:e7:48:54:
48:7a:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:34:13 2025 by rpki-client