Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: F32ioSUGo1XonhAbVu2ufSAHiBlcr+bpDQp9qNARN40=
Subject key identifier: D2:C4:3D:2C:5F:16:4B:24:0E:0D:A7:8F:E9:A6:92:AA:33:9E:19:35
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 0197C6B8B960D6D07B4CC6CA07C98EF9E8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 035F
Signing time: Tue 01 Jul 2025 16:01:24 +0000
Manifest this update: Tue 01 Jul 2025 16:01:24 +0000
Manifest next update: Wed 02 Jul 2025 16:01:24 +0000
Files and hashes: 1: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (hash: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=)
2: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
3: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
4: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
5: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: dWHD99RjL2JeN0zLJAIr7d5KWPd/nV7ZXLYjfM3mMYM=)
6: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:b9:60:d6:d0:7b:4c:c6:ca:07:c9:8e:f9:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jul 1 16:01:24 2025 GMT
Not After : Jul 2 16:01:24 2025 GMT
Subject: CN=d2c43d2c5f164b240e0da78fe9a692aa339e1935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:85:00:93:c0:ce:15:c1:43:a3:a5:00:45:
08:ac:88:50:af:99:fd:7a:f1:ee:f6:41:d5:f2:63:
c9:15:6e:45:9f:5b:34:bc:89:c4:ba:b5:08:64:8b:
96:c0:0b:ad:28:7d:de:90:3d:7b:e0:fd:22:b5:10:
a3:50:23:02:58:17:ff:d4:32:44:25:4b:85:b8:06:
64:90:5d:79:59:43:03:23:33:da:41:61:f4:22:05:
80:37:ab:0b:4f:2f:5b:46:95:c0:ee:53:83:e3:ad:
af:c1:cf:3d:3c:29:52:b8:e9:f8:41:36:2c:35:5b:
6f:26:8d:0f:f0:ae:24:54:4b:1a:57:61:ba:51:32:
db:3b:a2:15:ed:6e:7a:9a:6c:80:fc:54:5c:1c:e2:
c7:29:a4:81:7a:62:f3:a8:b9:c5:6a:51:c2:24:a0:
bc:e1:58:5b:ff:f8:6d:ab:7a:e5:57:dc:29:33:f0:
e9:9a:7d:a7:4d:d7:69:b1:4d:d3:b2:15:aa:5c:4e:
06:71:e6:93:67:0b:ef:41:4f:60:9b:3d:ba:4d:d7:
09:99:14:c8:b3:25:1f:ed:8a:71:7f:67:38:85:09:
cd:c8:2f:b2:bd:b8:bf:5e:8e:35:66:65:b8:b3:75:
09:c2:e0:ee:06:9b:9f:42:95:00:08:88:86:84:7c:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:3D:2C:5F:16:4B:24:0E:0D:A7:8F:E9:A6:92:AA:33:9E:19:35
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e6:cf:fb:46:3a:cc:66:1e:13:76:5f:51:a6:f2:b0:54:83:
cf:31:77:ec:02:e9:51:b9:9e:46:de:cb:71:2c:60:4c:91:dc:
73:c8:6d:e2:17:b4:4d:a1:22:c4:d4:c1:ef:a9:41:88:b0:16:
4a:d6:1e:eb:eb:2b:01:2a:31:e4:6a:cc:82:fd:bb:66:91:d8:
74:6c:af:94:dd:77:7b:b3:3e:a8:1a:66:90:ac:6c:bb:d7:b4:
92:cc:b2:00:9b:2a:88:d5:dd:d3:bb:b7:74:0b:67:c2:ab:17:
9e:d4:68:01:a9:a2:4d:5e:32:7a:0d:fd:82:34:36:fc:b6:0a:
3a:c0:19:fc:4d:33:dd:cc:34:8d:f4:a6:8a:c1:1d:b8:dd:4e:
55:44:10:3c:07:70:0d:4c:82:d7:8b:d0:42:4e:a9:96:d7:82:
4d:cf:f2:6c:f0:31:e8:42:b4:bb:50:ac:8b:84:84:f5:52:be:
1a:d0:eb:cb:2d:c5:27:9d:81:6e:db:2f:8b:96:1b:b7:43:34:
c7:c2:7d:e6:c5:9c:c6:ca:c1:72:14:60:96:16:d9:8e:81:d8:
7e:93:f7:a7:e2:24:a2:ca:ef:3a:a9:c6:99:b3:b5:ae:12:bc:
4b:d3:47:32:11:10:ae:f9:2d:61:33:b6:ed:10:4e:2e:ac:a9:
a7:8e:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:02:02 2025 by rpki-client