
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File: uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier: rAHUlqodUXDMb/55eBEuViaUNow5pXDF1JWC0WQar+w=
Subject key identifier: 6B:B4:F1:0C:39:7D:44:4F:2D:7E:36:B1:5C:1C:25:2B:B0:03:11:7F
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer: /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial: 019881D4FDBA47B219BCB34E22A30C16EE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 00:01:16 +0000
Manifest this update: Thu 07 Aug 2025 00:01:16 +0000
Manifest next update: Fri 08 Aug 2025 00:01:16 +0000
Files and hashes: 1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: vd1BWV+X8qJqHt7CNzVacSeruzx6AvBUmAYuwPob+OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:fd:ba:47:b2:19:bc:b3:4e:22:a3:0c:16:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Validity
Not Before: Aug 7 00:01:16 2025 GMT
Not After : Aug 8 00:01:16 2025 GMT
Subject: CN=6bb4f10c397d444f2d7e36b15c1c252bb003117f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:b3:fc:45:de:88:4f:24:5c:a3:14:c2:62:
d6:45:b8:22:f5:66:13:1a:0b:f2:2f:a0:7e:aa:fa:
70:cc:16:99:02:2c:91:fe:18:85:53:4e:cc:d4:07:
9e:ad:d0:ea:1f:07:30:ef:bd:44:8f:9c:b7:d3:11:
d4:47:a0:71:1c:7d:37:6e:a7:b3:2d:36:41:f7:e8:
cb:e7:cd:a4:a0:8e:d1:a7:18:82:f6:36:8c:a2:ab:
a5:dc:d1:46:ca:37:5d:e7:9a:22:c8:84:de:83:a1:
38:ce:d8:0a:52:57:40:76:f5:d6:d3:1c:2a:8f:44:
3b:77:95:b3:cb:b3:b0:c9:73:02:1f:06:8f:52:8f:
f2:8e:53:98:ef:5e:d9:45:cb:17:5c:89:86:49:3b:
38:ea:82:7b:ef:15:f3:9e:7d:62:fe:43:64:ca:9d:
8a:6b:72:d5:38:8b:8e:a9:bb:39:25:7a:6f:48:66:
4c:ff:b7:ad:64:2f:eb:5d:5d:94:e9:6f:65:9e:04:
d1:20:96:64:4e:d9:e0:60:df:c9:e2:c2:6a:6f:89:
42:bb:82:ee:49:10:10:38:58:34:fa:5b:07:1b:ee:
67:ce:81:f3:2d:f2:e4:cb:c0:27:6e:ac:a5:65:cf:
5e:4e:a3:f2:f8:c9:30:cb:c6:a9:aa:a9:8c:ab:12:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B4:F1:0C:39:7D:44:4F:2D:7E:36:B1:5C:1C:25:2B:B0:03:11:7F
X509v3 Authority Key Identifier:
keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:fe:ca:1f:35:8d:a7:45:62:c7:ca:8f:fb:a6:bd:ac:a6:
fb:bb:f9:81:42:30:aa:ac:66:3c:75:d1:bd:59:11:ac:c8:6b:
14:94:df:23:b8:0e:a6:1e:e9:ea:eb:9f:2e:1d:ee:88:46:af:
bf:92:c8:21:a4:25:3b:d3:24:e9:a1:36:7d:f2:8f:59:c7:2e:
76:78:77:ff:d6:b1:4e:26:bb:90:89:6c:e5:10:cd:49:58:1f:
c0:97:a2:37:b5:50:a5:65:75:57:e9:5b:7c:4d:2d:fd:a2:d0:
60:01:dd:64:d3:be:5d:01:ce:33:3b:0d:4a:59:d4:e2:5a:a3:
09:27:18:13:00:84:3b:39:1a:0e:e5:f6:83:2a:17:ef:bd:4c:
3a:90:c0:cd:f0:84:ed:0d:b1:69:e5:9e:87:89:22:8d:7a:3f:
fd:df:2b:41:18:a1:8c:3d:90:b2:fc:0f:df:b4:33:b9:93:9d:
ff:5e:98:13:7f:b3:0e:77:93:d6:0a:07:d9:fc:c5:aa:d9:bf:
a9:30:1f:ad:3f:6a:93:37:f8:67:33:9c:f9:ce:52:74:f1:f9:
a1:f3:15:3b:52:4c:5d:88:b0:7c:4f:31:fa:4e:44:09:d7:3b:
e8:02:9a:36:de:56:30:c9:dd:c7:2c:c2:ed:a4:c9:cc:52:25:
2a:1f:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:31 2025 by rpki-client