Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: RMKdPds7VsVqstAdA3WTVZL42Awfv1Ek34TC+WMNIak=
Subject key identifier: 3D:76:1D:98:27:92:FE:0A:D3:C7:19:C1:03:52:AA:A7:FF:93:9C:5A
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0197C6EFB8A592F4FCD0B30B94FCE70FFCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0995
Signing time: Tue 01 Jul 2025 17:01:28 +0000
Manifest this update: Tue 01 Jul 2025 17:01:28 +0000
Manifest next update: Wed 02 Jul 2025 17:01:28 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: ZHFopkqxKs3P149J2WQb47rwDvJKAQcmxocMOpGwhcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:b8:a5:92:f4:fc:d0:b3:0b:94:fc:e7:0f:fc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jul 1 17:01:28 2025 GMT
Not After : Jul 2 17:01:28 2025 GMT
Subject: CN=3d761d982792fe0ad3c719c10352aaa7ff939c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:07:5e:cc:fa:f0:b7:56:4c:7f:47:3b:1f:
90:a5:bd:49:67:87:34:f8:25:cc:e6:24:45:da:8e:
30:6e:a5:52:eb:5e:03:8e:e3:96:2e:48:ea:e5:68:
78:2c:34:a4:18:f7:d0:9b:48:c1:12:21:eb:03:2f:
95:9d:90:9e:a2:38:3e:cb:86:d0:60:59:d4:ff:4f:
e5:1a:bf:42:2f:b5:85:ad:d8:64:c0:e6:35:1d:40:
ae:96:f2:25:4e:12:ee:7a:10:a5:ed:ad:a5:36:4c:
bf:a7:6a:a2:e1:8b:85:2a:ca:51:13:36:7a:ff:72:
a5:93:50:db:63:37:f2:f7:87:84:51:9d:53:7d:90:
70:55:db:d3:fe:b8:7d:07:17:eb:73:bf:b5:3c:eb:
30:bf:59:4b:1d:c9:67:cc:59:2c:3b:c1:83:8b:dd:
e6:07:34:bb:94:b3:5a:c5:6c:37:dd:42:54:38:85:
32:34:30:c3:e2:8b:10:4c:86:14:47:95:37:6a:1b:
5a:88:22:c7:63:5a:1a:7a:ad:62:79:e6:50:33:15:
76:0a:0b:99:7a:59:d0:2a:d8:6c:93:9d:87:2b:78:
21:b0:77:f2:a6:5e:95:96:3b:ee:85:c5:cb:c8:2e:
25:b3:1d:0b:1b:7c:12:35:2c:9d:ce:6b:7a:c2:20:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:1D:98:27:92:FE:0A:D3:C7:19:C1:03:52:AA:A7:FF:93:9C:5A
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:b5:d6:1d:3e:c0:b2:81:70:1a:9f:01:2d:ec:3d:cd:7b:
61:08:42:d3:5c:d3:00:2d:60:c1:12:17:45:7b:cd:e3:ca:d3:
c7:6a:6f:74:82:5b:12:18:57:bb:80:db:08:2b:23:92:fc:da:
0b:55:7a:6a:d7:fd:51:9a:cf:8b:b1:06:45:0d:f1:3c:52:3d:
0b:b7:ef:be:dc:b3:d2:3a:2b:b9:bb:f7:a7:88:17:60:30:dd:
7b:d9:35:4c:a5:b8:21:37:76:6e:30:26:cd:c9:30:21:97:c6:
ea:45:79:36:5d:38:86:7a:1d:ee:77:b5:8d:a1:d0:03:7e:3c:
aa:b6:5e:88:41:54:b5:7b:6f:95:b1:98:fe:81:58:e7:f0:a7:
73:a2:5c:ff:dc:4f:ff:3e:cf:af:d2:c1:5b:48:ae:8d:df:56:
14:32:c4:ea:ef:dd:b9:79:e9:da:ee:17:bc:b2:17:05:cf:df:
a1:61:ab:77:e4:69:5a:58:d3:54:38:cb:1b:84:d3:2f:d3:27:
19:96:eb:50:d6:d7:06:3e:bb:6a:aa:be:ef:71:bb:15:97:6d:
64:a4:2d:c7:62:e0:20:ae:60:63:fb:ca:5a:d0:eb:83:54:8e:
61:9f:2f:0f:0f:ed:75:65:9b:d8:2b:7c:0c:87:f2:c5:20:44:
c6:a8:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:26:45 2025 by rpki-client