Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: uM7tWOq8WA05FIBcgbdLM4Loq6YdTKAKJkQVeUxzHnk=
Subject key identifier: 83:14:33:58:87:D2:D8:53:16:7F:CB:1C:FC:CB:7A:B1:DF:37:17:19
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01987486E31F479A0B456307F3374246CADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 10:00:53 +0000
Manifest this update: Mon 04 Aug 2025 10:00:53 +0000
Manifest next update: Tue 05 Aug 2025 10:00:53 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: NTsdXJO6RpvALhc7cgK2izagm1qs2R3snu5ZN1Szz3U=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:e3:1f:47:9a:0b:45:63:07:f3:37:42:46:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Aug 4 10:00:53 2025 GMT
Not After : Aug 5 10:00:53 2025 GMT
Subject: CN=8314335887d2d853167fcb1cfccb7ab1df371719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:f4:19:50:50:4a:f3:59:e6:60:3a:93:53:
c4:99:ff:11:6e:3e:83:1f:40:a1:0b:3f:08:08:12:
ff:c4:c9:c6:36:0b:08:d6:83:f7:31:f5:cf:5d:92:
60:c7:c7:98:d9:fe:24:9a:dd:a7:23:cf:c1:c9:6e:
cc:d4:98:9a:91:d2:6d:ff:7f:08:56:f1:7c:69:bf:
fb:8b:ac:ec:2e:72:1c:39:fd:87:e7:4d:0d:be:46:
96:a8:50:f3:0a:dc:23:01:38:2c:0e:a6:91:4a:cf:
59:c4:82:3f:9f:f4:d5:a2:36:af:91:08:48:70:bb:
b3:56:34:3e:fd:ed:d7:91:3e:13:f2:97:7c:09:1c:
57:1e:d6:a9:3a:b0:f0:84:67:64:dc:e4:07:83:15:
71:31:6c:7d:92:36:8e:42:14:7a:49:82:bf:bd:cf:
1e:80:ff:d0:2c:ba:40:d1:47:93:b3:31:a1:46:1a:
02:9e:99:35:30:ce:d8:72:91:85:3b:51:25:b1:92:
e0:1d:67:cc:11:aa:2f:42:16:58:e3:52:1a:1b:61:
7c:43:d5:f6:e4:59:ec:3f:61:a5:3c:0e:07:2a:eb:
2e:d2:a4:9d:32:3c:49:84:46:b3:72:7a:53:9b:db:
3f:46:06:f7:94:bd:34:02:e3:f9:19:1f:ee:12:21:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:33:58:87:D2:D8:53:16:7F:CB:1C:FC:CB:7A:B1:DF:37:17:19
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:f1:26:68:2f:b9:05:6c:3c:42:d9:e9:22:db:9a:c2:e1:
0a:18:ca:05:a0:eb:31:af:89:f7:8f:55:56:71:9e:6e:6a:ab:
bc:ac:68:c9:b8:7c:88:7e:b8:2a:92:53:dc:62:74:25:26:ba:
d4:3e:27:1a:a2:bd:a0:3f:67:95:15:b2:77:73:50:9a:6d:5d:
cb:30:fd:5a:91:f7:55:77:8c:1a:83:98:52:23:42:51:af:68:
49:21:9c:22:26:bb:03:3b:6a:15:4e:36:24:7d:be:04:4b:a7:
31:0a:51:2e:e0:73:b4:79:e0:bf:f8:a8:bb:40:3f:fa:9c:34:
3d:ed:0e:7b:34:19:8e:4a:9a:dd:f8:65:98:3d:b7:8e:b0:c1:
77:3b:14:ae:49:a4:fc:6a:d0:be:33:ab:b3:6e:47:ef:4f:89:
68:28:dc:43:b5:4a:1b:fb:04:dc:86:27:90:90:f6:9d:08:9f:
b1:cc:11:29:86:77:38:1d:ca:96:da:d9:c8:3f:2b:b5:96:82:
05:86:96:22:b1:b1:89:21:a8:eb:a4:f1:60:c7:77:4f:75:93:
2a:e5:d4:d6:2a:0e:d2:d0:47:6e:99:2a:34:7c:df:5d:22:af:
b3:4e:46:d5:5d:1d:16:a9:ae:0d:4e:b5:5a:d3:be:3d:06:13:
07:ba:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:17:34 2025 by rpki-client