Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: INaSTqtVvGaL4oQp3LxhslCDQhqCduGfOh4IYKl9Y1E=
Subject key identifier: 1D:44:8E:AC:C4:21:DB:C0:11:B3:2B:24:B6:19:AC:09:CE:BD:E7:37
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 0197B82145F6339828F18CF05F8141B92AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 03FC
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: uEo2q5ZI/lkalHoG1IbjVCHWOeyr/KH4qw32wXhDNa8=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:45:f6:33:98:28:f1:8c:f0:5f:81:41:b9:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=1d448eacc421dbc011b32b24b619ac09cebde737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:be:2b:a3:1b:40:eb:c9:31:f1:12:08:2c:
3c:cc:41:a6:10:3f:ff:9d:8d:d2:6f:da:c7:52:e3:
4d:a8:e5:47:90:17:a0:7b:09:5a:78:54:47:b1:c2:
92:73:e6:e3:dc:82:22:c6:0d:4b:71:8a:03:1b:4f:
04:a4:76:bf:09:99:fc:a4:82:5f:34:48:92:a9:73:
2d:61:b5:21:87:50:09:5e:27:2d:55:10:a6:3c:fc:
33:27:d7:c8:31:33:05:c2:f7:ac:41:56:17:a9:72:
a9:ec:93:65:39:28:54:eb:af:34:ac:48:a8:f4:b3:
5a:c9:6b:f1:69:55:02:b8:b7:b1:ac:a2:8c:32:0b:
9f:fe:6d:08:fb:dc:cc:d3:8f:86:14:10:76:0b:57:
c5:5d:6d:cd:7f:f5:70:1f:ce:fd:b4:87:25:37:ae:
a1:8f:99:22:25:4b:05:8c:b9:a0:56:cb:29:e9:88:
b4:f1:7a:97:59:ac:c9:c9:36:66:42:82:5a:a7:5a:
96:83:6c:68:44:d8:7f:75:8c:d9:b2:94:14:d8:8f:
15:42:38:a9:6a:de:d9:31:c4:64:3e:78:db:62:1f:
3c:19:f7:c2:01:a2:ca:25:67:a9:0d:e5:cd:f4:e4:
68:3c:76:fe:03:ba:6d:88:e9:0e:ea:ec:05:c7:a8:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:8E:AC:C4:21:DB:C0:11:B3:2B:24:B6:19:AC:09:CE:BD:E7:37
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:4c:9d:c9:e9:bb:0b:87:0c:f8:b3:b4:04:23:86:46:cd:
cd:c7:01:c0:d2:ae:dd:9f:7e:f5:09:9b:1d:6c:19:6f:a1:7c:
ab:d2:dc:63:54:7d:b3:bc:d9:a9:ca:c0:2a:d5:46:45:3c:28:
42:2a:8d:40:ba:1e:a1:d8:eb:f3:6d:b4:35:44:62:50:2f:c2:
1d:07:b6:fa:86:57:58:86:4c:25:51:08:55:81:41:c6:85:db:
ef:d6:4f:f6:42:55:85:9c:aa:1f:1d:48:15:cb:1f:94:d8:87:
41:7f:d1:8c:a6:01:c4:3b:af:b3:d3:ba:37:08:f2:e3:34:5e:
5f:ee:f6:c7:cc:2e:a0:f3:59:6c:c2:fa:73:0d:23:2e:5b:a2:
58:37:8a:e3:01:11:61:df:3a:92:5b:e9:cc:ed:03:c6:c2:14:
7b:61:f7:2d:4a:69:2b:c5:2f:63:01:df:f5:f2:ce:9b:e2:13:
3a:b0:c7:6f:f0:70:f1:a7:0a:e7:e7:b9:5a:cf:88:f6:be:40:
9e:23:9a:94:fa:74:77:95:99:a1:92:9b:60:40:ed:46:b5:ad:
cd:26:68:02:22:61:69:f5:b0:4b:68:81:1d:bf:e1:a9:8f:54:
46:e8:6e:07:a9:ed:62:00:0e:a7:d0:f3:1c:8b:8a:01:a2:bf:
f3:fa:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:04 2025 by rpki-client