Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: uKQZ05SS8IsNCHgAHCeMujjloeuOG1ZwXNdRI328VC4=
Subject key identifier: 2E:DF:66:05:01:44:99:3D:90:62:94:D0:8D:4E:4C:BD:FD:6E:A0:D7
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 01988168923A07456551613585ED0BBE36AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0DA1
Signing time: Wed 06 Aug 2025 22:02:50 +0000
Manifest this update: Wed 06 Aug 2025 22:02:50 +0000
Manifest next update: Thu 07 Aug 2025 22:02:50 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: stuQd3rtaFePxdeCsQ+M+iLmmIXw3vt0Ufe6VE5z2dk=)
2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:92:3a:07:45:65:51:61:35:85:ed:0b:be:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Aug 6 22:02:50 2025 GMT
Not After : Aug 7 22:02:50 2025 GMT
Subject: CN=2edf66050144993d906294d08d4e4cbdfd6ea0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:ce:a1:37:99:1e:f4:c6:29:44:c2:c1:20:
68:ff:67:e1:cc:79:9c:4c:6b:7c:6e:d7:2b:ce:a3:
ac:92:a3:7b:fb:f6:1b:46:0f:03:fa:c2:d3:fd:a3:
b6:bf:32:cc:f3:19:81:b7:da:93:f9:e4:75:43:dc:
0a:d3:6e:72:aa:e7:fc:ac:e8:da:5f:48:0b:75:0e:
31:58:d0:df:64:42:fa:3d:b0:98:a8:03:39:93:35:
74:09:58:6f:c2:4f:93:39:64:57:a7:d5:00:47:0f:
6e:68:4a:83:9c:04:d1:12:0f:33:cf:bb:68:d2:ea:
b1:1d:99:88:bf:8a:c2:b9:ed:98:34:ba:0c:dd:2e:
fd:c5:0d:38:dd:4f:77:e2:8e:a7:49:37:e5:d8:f2:
df:d6:53:1b:2f:e7:a1:a0:28:d4:0f:59:f4:df:75:
10:8b:cf:15:fe:d8:c3:cb:df:76:11:db:ea:88:3e:
de:cb:03:f2:b1:48:d0:72:fd:66:c1:88:e0:1e:6e:
05:86:95:71:38:3c:c9:72:2c:8c:93:47:0b:98:0b:
c1:99:c2:2f:ee:e4:5f:84:06:8a:f6:88:ae:ca:9e:
08:81:8d:ec:8c:f8:7f:3b:f7:64:2d:f9:a3:17:03:
3c:90:71:d2:5b:0d:20:d5:47:74:2b:63:ce:13:a3:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:66:05:01:44:99:3D:90:62:94:D0:8D:4E:4C:BD:FD:6E:A0:D7
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:32:cf:18:6c:61:b3:3e:6c:40:d5:a7:12:ac:6f:24:0a:e6:
02:f6:e8:f6:8e:50:dd:c2:88:cb:23:f1:fc:22:8a:32:47:94:
17:4f:9d:a7:5f:b9:df:24:a8:bc:5c:10:85:ac:b7:d5:08:14:
67:9e:7c:b4:c9:c4:94:5c:d4:bd:d4:d3:f5:90:ff:0d:a3:12:
d0:b0:69:8b:18:4e:95:78:07:13:37:29:93:93:f8:bc:21:7b:
05:a0:e1:f5:38:f3:48:13:2e:d3:c5:57:0e:fe:39:79:bd:bd:
c1:c5:eb:46:73:71:c0:87:7c:89:13:00:45:b9:09:3c:27:be:
9d:96:0a:ff:9d:3e:16:68:26:e4:cd:29:67:01:a5:cb:23:da:
6f:6e:01:9e:89:c6:39:f7:79:7a:58:3b:45:12:63:52:18:36:
1a:57:2d:0f:76:f8:dc:01:98:fa:8b:07:ac:b8:bf:b2:70:58:
8a:c6:52:d1:61:87:7e:7c:7f:85:38:d1:f8:dd:68:ba:1c:15:
1e:ef:4c:ae:f6:52:6c:9b:93:2a:85:30:e0:0a:e0:c5:09:b1:
65:d8:eb:5b:2c:60:0a:8f:fa:ba:d8:ef:d9:35:77:f5:2b:dd:
66:c4:f8:92:4e:dc:bb:cd:ac:ae:3d:9c:61:88:81:9e:53:0d:
d5:b3:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:05 2025 by rpki-client