Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: DC/L8ihu3K8ELOtNsSpjSA9+Vo4jteLpWdyx5TudZzE=
Subject key identifier: CE:3D:5F:AA:C8:4C:6D:A0:DA:64:50:BB:FC:D2:FD:CC:30:FF:EA:BE
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01987CE511C64CC0967D5FC441ED8F8F233D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 15EE
Signing time: Wed 06 Aug 2025 01:00:43 +0000
Manifest this update: Wed 06 Aug 2025 01:00:43 +0000
Manifest next update: Thu 07 Aug 2025 01:00:43 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: iMFoWl3W6YluvR8U18NIzjSCrVzJAtcDmjm4f6vPBy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:11:c6:4c:c0:96:7d:5f:c4:41:ed:8f:8f:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Aug 6 01:00:43 2025 GMT
Not After : Aug 7 01:00:43 2025 GMT
Subject: CN=ce3d5faac84c6da0da6450bbfcd2fdcc30ffeabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:8b:cf:6b:e4:b5:88:2b:c4:d6:10:b1:2a:
ff:c3:ed:a8:8c:18:92:8c:e0:a1:59:06:05:c2:1f:
73:60:a0:7a:1e:69:8b:c6:14:62:06:4f:3d:4a:0d:
f5:f5:f5:3a:d2:a0:2a:93:7d:6b:be:37:36:71:28:
74:71:3f:7d:63:79:a6:81:c8:a3:49:a8:c5:02:3e:
0a:99:d9:2a:30:d7:3e:bb:ab:2a:b4:93:3b:8d:a9:
71:b7:9d:a5:bf:22:52:69:46:ac:ed:99:4f:4d:03:
95:db:c8:24:ba:5a:e0:04:6f:3b:6d:7f:d0:15:87:
ea:85:a1:d9:46:bd:a4:01:ac:ed:e9:ca:a4:17:7a:
81:b2:63:de:9e:03:f2:d7:00:af:f0:74:e1:4e:ed:
84:13:86:eb:e6:fa:71:6b:70:ba:18:1d:24:43:d1:
35:07:28:05:09:7a:b1:1c:e3:43:1b:05:2e:5c:92:
fc:bd:8d:15:4c:0a:b7:f9:a2:54:18:48:fa:76:c4:
26:4b:e0:27:7e:83:56:d8:79:8e:9d:43:e3:a1:1d:
93:43:2b:83:48:ea:2b:ee:77:b9:d5:88:97:3e:88:
f0:ab:47:15:b9:94:49:08:b6:d8:4f:85:87:d0:52:
40:10:3d:8a:ee:7c:71:50:e2:87:c3:7e:2c:cd:5c:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:5F:AA:C8:4C:6D:A0:DA:64:50:BB:FC:D2:FD:CC:30:FF:EA:BE
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:59:5e:dc:85:53:51:c9:d0:b6:38:6a:87:ea:06:b0:40:
cb:c2:1c:09:2f:5b:4e:af:50:28:be:0e:2a:cb:5a:d4:fc:c6:
59:d8:99:39:ed:27:2d:7c:41:84:64:26:29:e3:9b:61:e4:58:
93:ec:5e:b6:53:05:b5:36:18:b6:63:39:bd:97:8e:3b:e1:50:
53:e7:84:6b:27:be:99:70:d6:27:1e:e8:95:0c:35:ad:01:53:
a1:f7:89:8c:f9:5e:0e:bc:a3:a9:ac:ec:5a:a6:cb:ed:75:44:
e9:7a:d6:79:db:74:b6:42:20:22:1c:58:ed:03:4f:11:5c:cf:
44:d9:0f:2f:e5:4c:9b:a7:39:6d:e7:a1:a8:32:8e:a0:f4:fd:
08:cb:3c:9c:d1:7f:ea:3a:18:40:be:a0:dd:3d:95:a6:82:c4:
6a:72:93:24:3a:a0:b8:43:61:d6:f9:41:1a:06:f7:a7:b6:aa:
2b:9c:ba:76:8f:5a:d5:2d:1b:97:0b:58:27:8d:18:1b:5b:4a:
06:f4:e4:67:42:e7:9a:5d:8a:1d:9b:7a:d1:51:d3:d6:a9:60:
c1:38:c9:6d:3b:09:d0:6e:a2:b9:80:f8:fa:47:f6:ae:a9:47:
fe:8f:43:bf:ed:7a:0b:16:74:e9:89:36:8a:11:c4:34:bd:bf:
d1:3a:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:29 2025 by rpki-client