Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File: uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier: 891HnzEn/Zeriwv9u1uJwANLAgxWvnaMgmzNNzhW7do=
Subject key identifier: EA:DB:3E:AA:7E:47:6A:BD:D7:C1:8C:DB:53:11:5E:09:B0:BB:81:50
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer: /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial: 0198744FB2867CADF5DD218805ECBF734192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number: 117E
Signing time: Mon 04 Aug 2025 09:00:36 +0000
Manifest this update: Mon 04 Aug 2025 09:00:36 +0000
Manifest next update: Tue 05 Aug 2025 09:00:36 +0000
Files and hashes: 1: Brko5nMKSPwBgCgkjjg5igCr-DI.roa (hash: 3fOnCI08ItaZVpBsarkgTQcdgGi7HK10nR8m2pkLLWI=)
2: RdMb9DZXvill1bIjga0E0ALFTSE.roa (hash: glVlBHXB1p3fuc6KcN7QeAF0s4whdubmLa4lXiIAO04=)
3: bGID9MISfapCQvxtnoK2mwgER1c.roa (hash: 48jEs1SYz7H/DF1j6XjhPt2MSQotOuG8cV4gNdbAuRU=)
4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: MkpeUHcHEpvKOYwbmGOjhkZp/NGrFGx6Wikl/1eXO9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b2:86:7c:ad:f5:dd:21:88:05:ec:bf:73:41:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Validity
Not Before: Aug 4 09:00:36 2025 GMT
Not After : Aug 5 09:00:36 2025 GMT
Subject: CN=eadb3eaa7e476abdd7c18cdb53115e09b0bb8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:79:8e:f4:c5:a1:a6:8c:1d:69:79:16:2a:
45:d1:d5:a0:da:ce:84:1a:f9:bf:63:a8:a0:e7:22:
b1:19:4f:bf:63:35:bd:b9:38:05:cb:6e:e8:f9:c1:
87:12:29:08:04:40:aa:f6:ab:68:b4:ee:cd:9a:f6:
0c:cc:44:e9:e4:b7:9c:31:cf:ec:50:69:c4:f8:b9:
fb:bb:db:4c:9a:f7:2d:f4:48:ba:26:f1:82:9f:f4:
2a:07:9a:1f:cd:95:59:02:71:8a:3a:d4:4d:ed:4d:
2a:24:d9:de:67:4a:f9:0e:b1:78:cc:72:13:82:db:
3a:3a:ef:cc:c9:8e:9c:9f:dc:b3:e2:66:bd:ff:40:
4f:82:9c:ae:72:d3:4d:a8:bc:4a:f3:34:0d:d9:98:
06:f5:02:f1:f5:63:ac:32:f9:21:a0:57:9b:85:e7:
4a:03:c8:db:41:19:cc:c1:ac:64:97:a8:7e:e7:c0:
59:bc:18:24:cc:77:ea:6b:9b:c5:53:a6:40:72:5a:
a1:98:2d:46:f5:72:1c:96:3e:bf:96:76:07:dc:b4:
b6:c6:9b:9f:7f:08:7f:48:03:ca:eb:07:47:c6:6b:
a6:d5:a9:4e:89:3b:56:f6:12:0c:3f:b2:c1:5a:a3:
d6:58:21:a8:00:d7:09:15:7a:cd:ce:c3:d5:4c:21:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:3E:AA:7E:47:6A:BD:D7:C1:8C:DB:53:11:5E:09:B0:BB:81:50
X509v3 Authority Key Identifier:
keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:76:ef:d5:4a:1c:7c:93:79:d6:df:f1:1a:b6:f0:62:39:
71:a1:a9:45:c4:df:04:dc:bc:2f:7d:67:80:5c:33:e8:f7:d8:
1c:66:bc:3a:67:0f:d8:f3:66:07:17:4e:c1:8c:84:d1:20:21:
76:0a:00:01:67:24:14:15:56:36:5f:ec:02:06:d8:6d:0d:57:
40:8d:0e:b3:f2:27:ef:c8:d3:39:5e:ad:ec:48:4e:e9:ee:fb:
79:75:b5:d1:24:23:f3:a4:2b:c0:44:9d:d2:ef:0f:03:6e:a8:
55:54:fc:74:57:ad:66:c7:9b:82:3f:7b:a6:23:06:8a:82:65:
66:eb:31:84:06:72:57:60:34:eb:75:11:0d:6e:c1:f3:71:cb:
61:95:9d:7e:09:f9:f8:54:44:71:48:64:1e:2d:c2:9e:23:a3:
24:f5:83:87:00:da:f6:dd:29:5e:71:91:11:16:80:24:b7:00:
7a:2f:f4:2a:36:05:60:6f:dd:e5:1c:da:97:cb:5c:d1:90:ce:
6a:8d:ec:1c:92:9e:af:6a:25:02:a4:65:eb:61:ff:82:a3:e7:
f8:d1:74:3e:24:ef:47:a1:05:82:20:ff:0e:0e:64:4b:35:bb:
9d:97:9f:8e:7a:1b:cf:fa:6b:20:40:7a:c1:94:2a:87:2f:b7:
7a:f5:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:33 2025 by rpki-client