Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: 43YcacXguwpCgYXpAnpAuS+6YtQXYCfVZpo7Ay5F5mc=
Subject key identifier: 34:8F:CD:2D:80:3E:04:7A:B1:F5:EF:20:A0:8E:60:B8:2D:AC:E1:A9
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 0197B8215D4FA0DF3C9EFC1651C0253C4516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1080
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: ESavzXF23WAf2J3OInYAvgw7CzRyqar1TKJJFBqi7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5d:4f:a0:df:3c:9e:fc:16:51:c0:25:3c:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=348fcd2d803e047ab1f5ef20a08e60b82dace1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:f8:a2:9b:61:23:d5:cd:5d:29:8b:72:bc:
b9:b9:9c:cf:84:4a:08:58:f0:23:22:ad:54:ef:29:
25:ff:a4:0d:b6:10:94:1a:04:b0:e5:be:bf:a0:a3:
cb:44:7c:41:73:d0:c6:6b:45:4b:74:cd:d3:49:49:
e9:85:b0:b6:43:59:f0:ce:2a:43:13:fa:9e:81:9c:
a7:d9:b4:4f:76:36:d3:5c:92:ad:dc:c8:2c:0d:5b:
3f:12:c9:0a:22:bb:03:29:bc:c9:c8:e8:74:61:c3:
34:82:cc:0d:5b:88:f5:a4:61:3e:81:31:a2:3b:0c:
ca:d9:1f:ad:7d:a8:1b:fd:2c:1b:e8:6f:ec:43:66:
98:e3:ec:38:06:e4:a0:87:11:d0:af:aa:da:d1:6c:
94:45:d8:a8:1f:45:f2:d6:c2:5f:d6:da:05:06:b5:
04:28:d2:12:11:56:cc:9f:ff:32:f3:06:65:c2:5b:
f8:66:5a:ff:7e:9b:e2:e5:e8:64:d7:da:03:15:95:
5a:01:77:db:74:a5:d2:aa:65:c1:9a:a4:c3:32:b3:
f4:43:f7:ad:76:c2:0c:dd:80:f5:c6:48:08:59:db:
fb:1a:17:90:a2:87:3b:6e:80:84:5a:e1:62:7d:40:
cb:1e:41:d5:e9:38:1b:19:c1:c7:f3:28:c5:27:79:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:CD:2D:80:3E:04:7A:B1:F5:EF:20:A0:8E:60:B8:2D:AC:E1:A9
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:88:1b:27:12:97:7f:1a:f3:a4:41:81:8a:98:ae:a3:fb:cf:
53:23:0a:ed:f7:7e:0d:b0:4e:13:05:ea:d7:4b:46:20:f6:2e:
e9:28:fa:c6:fa:99:30:61:da:4f:97:83:51:73:84:6c:c6:f5:
e3:6a:2a:94:49:54:60:97:5f:89:f6:66:71:67:c6:cc:34:32:
b3:4e:0c:0b:5e:91:83:19:c0:b0:c7:91:4a:87:f6:e9:c7:ed:
e9:31:86:cc:0c:f2:ac:58:e8:d7:26:dd:25:52:dc:a2:92:e2:
d0:d7:a9:39:65:84:7f:1d:15:bd:c6:fa:b8:94:d0:41:45:7b:
df:31:ad:62:fc:ff:3f:03:a6:11:a7:d4:da:cc:14:86:cf:0c:
4f:93:89:37:18:b5:c9:26:c2:e8:e9:19:86:67:5e:7b:14:65:
27:72:d0:63:1f:f0:b4:35:8a:6d:2f:0a:b7:48:89:bc:b4:53:
98:00:0c:9b:4f:60:90:a0:66:1b:fa:ef:de:38:fe:ee:b5:8a:
94:a6:52:52:f7:0c:92:18:03:57:33:ee:f7:3e:f7:26:2f:53:
37:c5:64:66:c4:0c:a1:d8:2c:f8:5e:f7:cd:d7:af:4e:f6:ca:
92:44:0a:fb:c2:ca:e9:a3:b1:4e:07:55:fb:a4:db:fd:b6:c6:
f1:09:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:09 2025 by rpki-client