Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: CAOhwaq+4HUvtCaLE/FIBCA5xNEVYutLRD9Zr/0tCuE=
Subject key identifier: A6:58:27:1D:3A:1F:38:86:0A:5C:76:9C:75:A7:09:C3:73:C4:D2:C7
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 0198737437A3CCA9973AAEA579C9317457B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 05:00:52 +0000
Manifest this update: Mon 04 Aug 2025 05:00:52 +0000
Manifest next update: Tue 05 Aug 2025 05:00:52 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: O/yU1/MDPYZxEaIJYxHjtxtQR1XdUt664QxX3YkMI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:37:a3:cc:a9:97:3a:ae:a5:79:c9:31:74:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Aug 4 05:00:52 2025 GMT
Not After : Aug 5 05:00:52 2025 GMT
Subject: CN=a658271d3a1f38860a5c769c75a709c373c4d2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:02:cf:f2:58:35:78:06:bb:ce:b5:01:8a:
75:ae:2d:22:18:24:b5:d7:8b:bf:c4:41:89:9b:f9:
64:dc:7a:80:bd:1b:c5:04:82:22:0f:99:15:6a:f3:
8d:f3:41:5f:2d:67:8d:42:fe:2c:3b:d5:a8:a5:c5:
6f:c9:1d:e7:57:af:63:f4:39:46:a3:aa:62:a8:a4:
0b:ff:43:b5:04:d0:a0:d7:11:e8:e2:18:00:23:8c:
49:ad:d6:eb:8e:b2:ef:ee:85:b8:8b:6e:84:5e:89:
18:52:63:00:09:0a:84:10:cb:19:af:2a:6c:75:8f:
4a:f4:bb:1d:ce:5e:c1:1b:cb:20:63:59:35:17:03:
f4:67:b1:26:6b:df:37:44:c3:6c:b0:23:75:00:7f:
47:51:d1:85:c4:6c:4c:1c:71:91:9a:21:c9:1c:30:
b1:f7:e3:8a:b6:b5:99:a0:83:f4:71:fb:43:3b:12:
e9:1b:6f:48:44:d9:26:4f:d9:f2:49:c3:74:20:06:
6f:0c:54:e4:b6:d4:03:16:3e:e0:c9:f5:85:09:e4:
71:09:de:17:92:08:16:e1:50:06:8c:36:70:40:35:
c1:23:f4:e5:4d:68:3c:47:b2:d2:30:6a:6e:64:dc:
fe:d8:51:6c:46:15:14:03:1d:9e:ef:c8:60:78:05:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:27:1D:3A:1F:38:86:0A:5C:76:9C:75:A7:09:C3:73:C4:D2:C7
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:31:6b:3c:c4:dd:47:cf:cf:25:e8:2f:61:cf:61:47:1d:58:
a7:74:b6:5c:48:26:a3:22:bf:5a:d0:4a:f9:40:86:0a:69:e0:
a4:a8:58:45:fe:6f:8f:91:75:01:12:39:e7:21:87:94:3e:9b:
45:07:c4:e6:97:c7:0a:e2:a8:c0:8a:67:74:4a:e6:b3:4c:4e:
7b:62:3c:4c:ef:ed:de:d1:57:b6:3b:51:0a:43:a7:70:8b:e3:
fb:09:93:29:ff:64:33:79:bb:13:1e:24:66:83:f4:a7:77:ba:
2a:ff:e3:31:0d:ac:01:44:55:81:b2:8b:14:da:7b:8a:70:b0:
e7:fd:d4:46:0f:5f:0e:bb:bf:53:a4:aa:ff:64:21:1c:3f:39:
7a:e3:68:ed:f8:d6:64:38:7b:83:a1:07:58:91:40:c4:af:32:
bb:52:87:d7:f1:51:34:38:4c:5e:1b:77:83:58:05:fa:0c:6d:
1f:6f:ca:5f:7a:37:f3:c5:cc:9a:af:ad:a0:41:96:52:b4:a2:
15:d5:40:87:f2:e8:cc:7f:00:12:fe:a9:56:7f:25:b8:e8:34:
19:ab:c2:60:55:2c:ed:64:ab:63:b5:5e:d1:36:bd:12:6d:be:
cb:19:8d:67:1a:92:04:6a:b1:af:66:12:87:c8:9d:99:1e:3e:
e2:1c:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:10:33 2025 by rpki-client