Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: mhRyt5tp0VqU1qeQWOKjX1n91GFsj/njTQM4Casv83o=
Subject key identifier: DB:E5:A5:82:99:F5:5A:A0:E5:94:F4:44:02:2D:FE:E1:E8:27:B8:1A
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 01988A6A627F12CD72E888211CE773954F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1372
Signing time: Fri 08 Aug 2025 16:01:24 +0000
Manifest this update: Fri 08 Aug 2025 16:01:24 +0000
Manifest next update: Sat 09 Aug 2025 16:01:24 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: MId62H4zbdxBCEbSvbBmnx96/nxKJbLv+0j3ccXKDV8=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:62:7f:12:cd:72:e8:88:21:1c:e7:73:95:4f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Aug 8 16:01:24 2025 GMT
Not After : Aug 9 16:01:24 2025 GMT
Subject: CN=dbe5a58299f55aa0e594f444022dfee1e827b81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:b3:3c:c9:06:68:a0:21:15:49:6f:9b:f8:
a6:47:93:e9:dd:78:fb:39:11:84:a1:6b:95:16:c7:
59:d3:8f:7a:03:20:27:61:d5:1f:38:d5:94:75:0b:
b7:1b:6a:8a:55:38:95:9b:ee:6e:36:69:ab:cc:e9:
e0:31:26:83:14:a5:35:50:51:ed:41:ab:c2:72:15:
cb:db:18:18:0c:36:5c:14:0d:58:c2:02:ff:4f:b3:
00:c3:da:59:2c:cb:7e:cb:4d:21:61:a3:75:7e:cf:
5b:24:2c:a5:b1:01:f9:87:3c:1b:48:79:77:28:d1:
6e:15:cb:ee:6b:6c:e1:41:c9:11:55:0e:88:aa:d5:
26:3c:3c:db:69:2a:25:9b:41:f4:7b:c4:7c:0e:8a:
8a:4a:ae:d0:2c:e6:16:04:17:da:f2:86:4e:db:82:
0a:6e:a8:cd:37:dc:c7:92:3e:43:4a:4d:df:aa:f6:
ec:a9:9b:3f:f5:07:aa:19:74:71:e2:db:3e:89:40:
3b:3c:a2:a9:8d:77:04:bd:8c:23:bc:a1:ff:90:ca:
e3:a9:04:ee:7d:75:39:70:e7:f8:bb:e6:c0:6d:c5:
9c:8b:1e:41:a3:fe:75:2b:bb:30:27:e1:e6:e2:fa:
f9:db:ac:47:06:ae:d1:90:d6:18:d6:e8:b3:a1:d5:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:A5:82:99:F5:5A:A0:E5:94:F4:44:02:2D:FE:E1:E8:27:B8:1A
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:44:4c:07:dd:6f:74:a4:8c:03:6e:32:9a:d6:43:82:a9:9a:
5b:62:8a:ff:eb:73:f5:3c:45:7e:ea:e4:f9:5a:50:6b:76:ad:
80:71:ea:7e:35:06:fd:fe:25:5a:7b:af:e6:72:53:39:13:0c:
8f:4a:28:a5:be:b9:7e:63:09:62:6d:54:d7:f5:da:0e:f8:e6:
e7:be:0d:a9:e0:b5:ce:d7:a8:8d:b5:c0:a6:f8:58:30:7c:c5:
75:74:2b:9b:b0:a2:a7:aa:0f:b4:b2:03:57:cc:46:29:4c:e6:
e1:10:24:a5:74:fc:a4:d5:aa:83:70:05:01:eb:2c:ea:fe:78:
14:fc:7e:83:13:ee:e9:6e:0c:e3:43:d0:f3:39:68:83:38:88:
c2:31:01:50:6f:4b:de:d6:3a:16:a0:48:67:2c:81:b5:33:fb:
75:cf:93:f2:f2:1d:8a:81:07:18:3a:06:f2:ed:fc:b5:23:e4:
4e:66:7c:2e:9b:9b:f3:6b:da:ca:df:55:9b:0c:b1:11:b4:d9:
81:eb:ee:8b:0a:94:73:f2:ff:2f:7a:ae:47:3f:3f:15:5f:00:
66:71:c0:fd:68:c4:1d:b0:b0:a8:a5:59:6d:91:57:b6:14:fb:
54:09:d9:53:fe:0b:ee:c7:d9:00:1b:82:dc:5a:9b:35:92:41:
41:f5:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:46 2025 by rpki-client