Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: ZzgP9TEf8DSNyWokTZLew3Jj1xuz5jXby7OXMnKHSmk=
Subject key identifier: 39:42:77:38:A2:B0:63:42:45:E5:85:3B:08:45:57:B5:21:46:D4:D8
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 0197CA955A74CFC35311347E306B4C1A2D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 0FD2
Signing time: Wed 02 Jul 2025 10:01:14 +0000
Manifest this update: Wed 02 Jul 2025 10:01:14 +0000
Manifest next update: Thu 03 Jul 2025 10:01:14 +0000
Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: PE2SXr2LyphSPLaTBe2MbkaVQr1HtAmLV7jit04pKI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:5a:74:cf:c3:53:11:34:7e:30:6b:4c:1a:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jul 2 10:01:14 2025 GMT
Not After : Jul 3 10:01:14 2025 GMT
Subject: CN=39427738a2b0634245e5853b084557b52146d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:39:88:5f:b3:9a:7c:46:46:d0:d0:aa:5c:
1f:27:fb:9c:7a:7f:74:9e:49:29:a2:08:23:14:b7:
40:58:54:b6:b9:13:3b:2e:3f:22:1d:8c:67:b6:96:
ca:d2:ec:7e:58:82:d3:c0:09:79:ea:ee:48:8a:74:
76:df:cc:09:10:fb:40:c6:40:1a:95:dd:a5:96:a2:
c7:c6:45:46:7b:10:3e:41:c9:dd:f1:ec:fb:32:39:
4b:6c:a4:43:ea:ae:9b:20:33:6e:24:4b:90:a6:e6:
82:21:6f:c3:df:a5:ed:99:01:9a:67:ad:7e:bb:9c:
d2:c9:19:e3:cb:cc:17:f7:9e:8b:ad:c1:75:76:ca:
98:fc:6d:7c:74:9b:86:75:4b:8c:09:d9:46:6d:2c:
aa:33:13:86:a8:f2:8c:3c:0a:3f:dd:f6:bf:8f:dc:
43:c2:a3:c5:f4:ff:f6:d7:59:87:27:4a:6d:8f:77:
b1:d8:7a:11:72:03:16:0a:36:99:8e:14:aa:86:20:
b8:17:e3:97:24:04:c3:2a:ff:fa:02:6f:09:57:a3:
29:1d:43:89:40:2b:00:13:c4:be:d9:4d:05:23:2d:
98:69:b2:9c:d1:5f:75:4a:22:4c:cf:09:55:17:e2:
ff:49:72:35:df:1d:95:46:22:d9:43:2c:fe:3b:3b:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:77:38:A2:B0:63:42:45:E5:85:3B:08:45:57:B5:21:46:D4:D8
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:38:dc:d3:f8:c0:1d:0c:d4:80:86:ce:9f:a9:be:85:4b:16:
e7:5c:33:31:bb:c2:ec:be:fa:af:f1:8b:16:2c:e0:09:7d:61:
f9:57:57:1b:ba:2e:8c:a1:d8:d8:47:49:bb:b0:88:31:f7:a4:
7b:17:e1:54:e6:0a:15:3c:b6:17:79:59:14:d3:da:49:25:22:
d2:8a:a2:f5:f7:30:d1:60:5d:80:10:6e:b2:55:e8:c0:06:8d:
d4:97:67:d5:65:5f:0c:96:f5:ae:b9:57:cf:74:bd:a1:a5:96:
0f:6e:d4:e4:c0:56:6e:a1:17:aa:2a:e8:10:f2:95:c4:67:04:
16:1f:1b:f3:ed:62:31:92:29:81:26:40:00:db:e0:f1:bd:d1:
44:4b:f2:e9:0e:bb:03:00:d4:65:2d:72:ae:57:4d:62:95:14:
9e:6e:bc:ff:24:e8:ea:64:19:b4:2d:ff:76:d1:f4:17:6e:f5:
1f:48:d7:96:bf:a4:35:b8:98:4f:c7:24:f7:38:3d:cf:16:aa:
06:e0:d8:c2:4e:5f:44:f3:00:2f:a7:a1:4b:f3:ce:08:2d:75:
b5:81:5f:e3:03:d8:48:bf:44:97:71:11:66:a6:bb:32:df:40:
2c:29:0d:39:fd:f4:11:b0:60:7a:04:24:d2:27:a3:93:19:e9:
ed:62:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:31:21 2025 by rpki-client