Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: wUjphjAmVblncqEPO6DQSsUhiPmOGBEo6LNhHE+0EWM=
Subject key identifier: 11:FE:61:31:75:5E:4E:D2:03:11:D0:1C:B3:63:74:49:24:8D:78:61
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 0198955BA626140E5C8DAA09F74FED59942F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 154A
Signing time: Sun 10 Aug 2025 19:01:08 +0000
Manifest this update: Sun 10 Aug 2025 19:01:08 +0000
Manifest next update: Mon 11 Aug 2025 19:01:08 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: pW/esq75sbyn4nLL55xlZyQGL/zE9NDdx9+km0gigoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:a6:26:14:0e:5c:8d:aa:09:f7:4f:ed:59:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Aug 10 19:01:08 2025 GMT
Not After : Aug 11 19:01:08 2025 GMT
Subject: CN=11fe6131755e4ed20311d01cb3637449248d7861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:77:a5:8d:9f:7e:9f:55:da:a4:9f:66:3e:
3b:36:5c:24:cf:06:a4:22:dd:7c:f0:5d:92:e8:42:
16:91:1c:39:b6:ce:79:4e:1e:12:8d:78:ff:31:e4:
28:77:6c:39:d5:f3:21:cd:63:33:9b:35:1f:dc:9b:
c6:f9:4a:42:d4:64:b9:ff:66:e3:c5:51:ef:5e:09:
43:dc:c6:b2:7f:a7:9a:ac:b1:6f:33:60:ea:2a:6e:
45:ee:ef:87:5b:79:53:ad:bf:1d:03:82:05:6c:e4:
f5:00:85:22:e4:ac:b5:6c:65:80:66:07:84:0c:99:
63:07:dd:1c:1e:ea:40:25:2c:30:50:86:39:f3:e5:
65:2a:65:d2:b8:ce:d5:31:27:78:be:56:ac:55:42:
fc:2d:0a:3a:1f:4c:2e:d6:b9:32:28:19:a6:dd:b0:
d7:83:6b:f1:6c:be:f1:24:9d:63:4e:96:fc:83:a2:
ef:51:98:d6:5c:e4:83:d0:46:3b:dd:2e:38:58:6d:
7c:41:99:5b:c6:9c:ad:99:95:e6:7e:4c:f2:96:b2:
6f:58:9e:c7:b6:86:76:59:72:46:c3:4f:80:05:34:
bb:f2:57:ab:c0:b8:3b:16:1a:05:05:04:3a:37:dc:
ce:2f:6e:e7:1e:04:6a:dd:87:bf:56:48:1f:6a:8c:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:61:31:75:5E:4E:D2:03:11:D0:1C:B3:63:74:49:24:8D:78:61
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:11:da:04:eb:9e:28:ad:c1:c4:99:69:c5:ff:95:e8:ca:
39:9e:15:43:0a:5d:0f:cf:f4:36:26:83:69:0a:de:39:5e:34:
6d:8f:ca:7c:85:ab:2f:bd:6e:78:0c:d7:9a:e7:15:ec:6f:c9:
68:5a:08:10:24:06:65:60:9b:59:1f:31:d3:e8:3b:4a:17:6f:
78:26:26:48:da:a3:ef:09:d2:6e:a2:73:81:ed:98:79:7c:19:
f7:00:b0:e3:55:4a:6b:6f:45:1a:86:bb:ca:73:51:88:01:fe:
6d:9c:c4:14:7d:2c:94:8f:6f:04:ae:61:31:75:cd:39:43:ee:
d6:05:cd:4a:08:08:4c:60:8b:8e:a3:b2:e0:22:9a:d4:30:bd:
d9:59:b5:08:88:8e:56:61:67:65:50:4e:cd:d7:f2:d3:fc:1b:
db:2b:63:56:5a:9b:70:09:2d:08:81:24:de:0c:a5:31:a3:9e:
53:62:23:28:4d:d7:b4:f1:ce:1b:48:36:5f:44:7a:81:9d:b9:
d4:76:a2:9f:c5:17:58:f0:86:f1:7e:62:f8:d7:f6:c3:ef:10:
2e:42:0f:46:3d:11:51:4e:c5:cc:40:16:87:63:48:51:a6:e5:
d2:ed:93:f6:22:cd:0b:46:70:80:b5:53:98:e1:52:78:1b:8d:
54:55:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:34 2025 by rpki-client