Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: 3rtlEHn0SC+Jsx33m2RFsBMW/DO+zEkZMC7j//9CcxQ=
Subject key identifier: CE:13:73:49:5E:73:23:93:7B:03:63:B1:F2:56:82:42:AF:1F:D8:EC
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 01989336A076C2B241ED160E6E5BBD34FF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 047D
Signing time: Sun 10 Aug 2025 09:01:27 +0000
Manifest this update: Sun 10 Aug 2025 09:01:27 +0000
Manifest next update: Mon 11 Aug 2025 09:01:27 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: kEmqRnMoaD/qk58kAhtUwIasjVJ5/1OqxlYjL/zecn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:a0:76:c2:b2:41:ed:16:0e:6e:5b:bd:34:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Aug 10 09:01:27 2025 GMT
Not After : Aug 11 09:01:27 2025 GMT
Subject: CN=ce1373495e7323937b0363b1f2568242af1fd8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:11:a6:44:a5:3e:85:3b:89:10:2e:f1:72:
ed:d7:73:9a:18:48:2d:e1:ee:a9:43:0f:2a:1c:13:
93:50:03:fb:b1:cb:8b:cd:96:83:ba:bc:54:9d:5d:
b5:df:95:df:b7:ca:c3:28:92:45:87:86:8a:60:98:
7f:19:88:c0:70:43:00:c8:3d:13:19:74:9a:1b:c0:
5b:52:b4:c7:91:3c:47:2e:a5:b9:65:52:f9:99:b8:
fa:1d:16:19:b7:7a:b0:45:b5:fb:c0:db:d9:c4:4b:
b9:fa:b7:6f:68:34:78:33:88:23:51:28:6b:c9:26:
d2:58:0e:ff:50:69:23:ab:95:77:a5:5d:bb:90:af:
74:0a:2c:5a:bc:62:5f:2e:bf:58:31:b2:8a:5c:27:
55:7a:cd:82:42:5f:89:97:38:78:2f:66:c7:4d:1f:
a0:11:55:ec:3a:af:8d:7d:2c:55:55:0a:25:cc:9d:
d8:5f:16:c7:ec:22:35:5f:ce:48:80:9c:b0:b7:2e:
a2:79:ba:e9:65:93:75:f1:91:4b:2a:17:6b:4d:ac:
5c:0e:66:db:40:4f:a6:82:9e:4f:b9:da:de:c2:b3:
38:88:b9:8e:0e:60:c3:46:1a:d4:0c:75:12:99:2f:
aa:37:15:c1:41:a6:6f:53:7e:a9:fb:45:ed:4c:5c:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:73:49:5E:73:23:93:7B:03:63:B1:F2:56:82:42:AF:1F:D8:EC
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ca:9d:5d:af:ab:1d:e5:20:f3:ff:83:9e:67:5f:83:17:82:
31:07:da:71:48:85:d6:1c:18:15:c5:b1:a0:eb:92:72:e4:d9:
49:62:3d:fe:10:26:0c:86:ae:5a:79:6e:d9:44:f2:ec:c6:8a:
61:9e:a2:1b:fa:f2:c1:9e:d9:2d:5b:28:d0:aa:23:c8:34:8e:
fb:94:c2:03:c1:e8:9e:da:2a:ab:03:7c:ad:6b:21:1f:c7:3b:
46:cc:93:33:4e:32:17:c4:2b:d6:62:c1:5f:9b:ec:5a:11:a7:
06:79:aa:41:16:dc:30:55:76:03:e6:a6:5a:71:ff:de:11:c8:
4e:6b:42:c5:85:61:ed:f9:a3:43:6f:c1:fa:45:67:4c:d2:0e:
70:ab:b7:1f:85:ec:8e:a0:ed:1e:d1:38:30:64:fb:de:0f:34:
8a:7a:7f:0f:5a:0e:3c:94:1a:c5:f8:b0:8e:a4:de:d0:9a:13:
6f:97:bd:82:17:fc:c7:02:b2:17:56:04:05:73:c8:0f:5b:5f:
c8:5a:1b:2f:20:1f:c9:05:60:c1:ee:42:04:56:51:b7:e2:1e:
88:15:49:48:67:ca:0b:ff:a1:98:31:2c:97:c7:9d:05:db:56:
c2:80:f3:2e:16:1d:6b:60:8b:0b:23:30:9c:6a:10:08:2c:e0:
96:0b:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:43 2025 by rpki-client