Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json)
Hash identifier: uqELFRQJp+sYi8pL8kR3hGFNQ70wiP06t5qdr0bVG3I=
Subject key identifier: A0:BF:E2:6B:08:F3:98:18:DC:EA:27:82:44:8A:85:3A:68:7D:CE:5B
Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Certificate serial: 0198801D0F441D8380D998C22537D69D6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
Manifest number: AE
Signing time: Wed 06 Aug 2025 16:00:44 +0000
Manifest this update: Wed 06 Aug 2025 16:00:44 +0000
Manifest next update: Thu 07 Aug 2025 16:00:44 +0000
Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: 0MkWanwcm2UBexq0UmwVfEi0q3hLCqtqPHzM1ZJXUn0=)
2: UzdAI9r8ururR3efFNaAcO55XaM.roa (hash: pCH+pFsUkI5n2Li26SVl8WqYpHuk5K9R9H/mh0OmiJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:0f:44:1d:83:80:d9:98:c2:25:37:d6:9d:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71
Validity
Not Before: Aug 6 16:00:44 2025 GMT
Not After : Aug 7 16:00:44 2025 GMT
Subject: CN=a0bfe26b08f39818dcea2782448a853a687dce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:bb:32:ed:57:04:a6:e4:33:32:59:b3:ea:
40:1f:c9:00:8d:4f:21:b1:ac:82:a8:d7:de:95:e6:
a8:90:ba:5d:78:08:f7:5d:57:6f:8e:02:16:2e:c9:
42:d2:c3:1c:e5:44:00:4b:e8:8d:3c:62:0d:e3:db:
fc:93:5a:40:94:51:0d:56:0d:01:c8:a6:4d:8f:7b:
02:8a:ce:76:64:b6:2f:20:5c:b1:37:b5:32:59:9c:
fd:85:ec:c9:b0:fc:6d:c0:79:ee:6a:53:fd:ac:89:
c3:4e:82:a4:cf:ac:9f:7e:ab:5f:31:bd:de:b3:ea:
68:17:3f:90:ae:69:f5:36:f0:ed:18:b9:b2:30:e5:
29:5f:7e:8b:00:84:99:ec:0c:a3:da:07:fe:92:b1:
02:5c:8b:9f:b7:1b:9b:91:92:c7:5f:94:0f:bb:2b:
88:94:13:1d:4e:4f:ad:d9:72:8f:65:e1:64:56:28:
49:50:b8:3d:85:f8:2d:9c:40:74:60:26:17:e5:bb:
8e:73:03:a7:69:be:92:7a:cf:81:29:f7:e8:ad:94:
fb:94:b5:d5:aa:ec:f4:03:0e:26:be:17:b0:67:7e:
70:11:8b:2c:76:f8:c8:06:01:60:3a:43:a6:9c:65:
6d:f6:0e:cd:e9:2e:a8:1a:5a:01:07:76:77:4e:9c:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:E2:6B:08:F3:98:18:DC:EA:27:82:44:8A:85:3A:68:7D:CE:5B
X509v3 Authority Key Identifier:
keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:5b:85:64:f0:ae:c4:68:38:0c:0f:09:12:e2:7e:da:73:
46:3b:f7:ad:ea:ac:67:9f:23:d3:7f:df:20:12:44:37:7b:b5:
f2:79:65:e6:ba:72:ca:45:62:e6:d1:d8:d0:1c:f4:04:cb:89:
2c:54:8c:16:6e:b9:09:e8:3e:47:71:95:f2:d4:b3:3e:42:e9:
59:11:17:55:66:eb:b0:bf:6f:90:10:97:66:94:34:b1:f8:02:
51:04:18:e5:c6:db:cc:b7:dc:5c:a6:94:76:95:3c:4f:ef:9f:
6e:1a:0a:97:a4:8b:41:29:72:cb:c8:45:69:a7:99:a5:42:62:
cd:78:dc:60:79:fe:26:d7:2b:b7:d0:97:c2:9b:62:a8:55:1a:
0b:57:cf:22:9e:f2:73:62:9e:99:d3:e3:fc:a2:e5:1f:47:c5:
2a:42:c1:76:25:9e:63:09:bb:65:75:57:3b:22:7a:10:9c:11:
e2:e4:2f:a0:43:40:ba:5a:68:c5:f0:f1:0d:9d:bb:68:29:79:
89:d7:b0:ec:3f:07:c3:a4:cc:a8:44:f1:31:d1:06:c0:5e:a0:
0b:d5:02:e7:e5:66:e7:82:9c:67:da:a4:bd:4d:ac:4e:b7:8c:
96:61:61:cc:df:f9:39:9a:34:69:91:18:d8:1e:84:16:3b:14:
ee:bf:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:49 2025 by rpki-client