Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
File: uxBfoysrF18Y3VkI3ScZFbv0444.mft (raw, json)
Hash identifier: mel5JKTivJd2okM/3Jr+dvjJNtM8BexeX41CGETfuUE=
Subject key identifier: 5B:0E:E5:B2:AD:FB:14:F6:5C:00:33:1D:F5:25:44:7A:E1:A7:D9:EC
Authority key identifier: BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E
Certificate issuer: /CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e
Certificate serial: 019887D65ED5F9B0DAB2D9B16E8CEC636386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
Manifest number: 2C
Signing time: Fri 08 Aug 2025 04:00:29 +0000
Manifest this update: Fri 08 Aug 2025 04:00:29 +0000
Manifest next update: Sat 09 Aug 2025 04:00:29 +0000
Files and hashes: 1: DH5lWnRu4VKIIyGckr7F-ImJh8g.roa (hash: h8GN1vDvRKFfkC5MTFTkZWf2BqZtBn12n/5FdI8mvIA=)
2: uxBfoysrF18Y3VkI3ScZFbv0444.crl (hash: JYd/AjPFWyLhjS1e93/slMhIjWH+0IbQsxqNsOFXkq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:5e:d5:f9:b0:da:b2:d9:b1:6e:8c:ec:63:63:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e
Validity
Not Before: Aug 8 04:00:29 2025 GMT
Not After : Aug 9 04:00:29 2025 GMT
Subject: CN=5b0ee5b2adfb14f65c00331df525447ae1a7d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:c8:f3:c2:74:98:1f:62:af:c6:03:a5:bd:
a5:c0:c3:2a:f1:84:fd:6f:29:a3:15:c0:57:31:d6:
84:b2:2b:17:71:5f:d0:d2:31:8f:93:2b:cd:96:01:
54:ac:7f:f6:fc:b1:5f:03:c9:1d:65:08:16:b2:c6:
21:5f:da:c4:bc:ea:25:d4:5d:60:80:6c:8b:aa:2b:
6f:8c:dd:34:2b:ed:12:98:a9:e6:c1:74:be:d7:bf:
7a:8b:1a:20:b5:44:91:8d:3d:91:a3:80:9b:32:2f:
87:be:e2:31:f5:4a:8c:64:05:a2:84:67:4e:17:4d:
10:eb:aa:c3:6e:84:0c:7d:ae:ba:72:39:66:dc:32:
5e:a2:70:50:09:83:6a:48:5c:69:06:51:64:ea:cb:
5d:0b:1e:81:f0:f2:b8:02:56:ae:8d:56:eb:9e:92:
57:53:0f:6a:dd:8b:d4:bc:d1:99:2f:4a:42:4d:11:
22:2c:ce:1c:79:10:62:2b:34:8e:6c:e9:42:fb:1f:
70:78:4c:87:73:a6:e2:42:e4:f3:9f:c1:89:98:69:
5a:99:21:a9:18:5f:32:0a:26:df:0a:94:c4:ed:54:
27:e9:25:70:8a:95:c9:39:64:f7:a1:26:79:cc:b4:
79:63:cd:c6:07:eb:e9:de:d1:fc:3f:76:b2:3d:2b:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:E5:B2:AD:FB:14:F6:5C:00:33:1D:F5:25:44:7A:E1:A7:D9:EC
X509v3 Authority Key Identifier:
keyid:BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:0c:76:5b:99:fb:43:fb:58:3f:18:c0:b9:e8:c2:45:e7:
cd:f5:03:9c:7e:e4:af:bb:6b:05:62:f9:0d:aa:82:6a:2c:a2:
d8:5a:dd:af:8f:cd:84:e6:6a:c8:5c:d6:d6:b6:40:38:6f:8c:
1b:08:cd:d3:69:88:47:04:fc:8f:be:e9:95:66:d3:1c:f0:75:
fe:c4:4b:ab:2c:6d:93:bc:a9:d3:be:a3:3c:b6:fd:55:26:6d:
3f:7c:40:ae:a5:a0:71:11:df:32:f4:cb:ef:8d:d8:15:fe:be:
98:a6:b3:93:6f:e4:b8:60:b7:37:b0:07:97:2a:b5:8d:65:82:
d0:3f:dc:97:9f:c3:32:14:00:31:f1:04:1b:0b:5d:83:df:e3:
4a:7b:8c:af:7a:05:4a:56:13:a0:65:86:02:d8:d1:01:2c:0f:
23:08:13:89:6b:65:11:6b:b1:d6:53:c6:76:0e:e0:96:43:76:
33:80:07:a8:59:d0:fc:65:cd:e9:d5:c1:1b:83:49:79:d3:20:
ea:ab:8b:7d:cf:11:c1:f3:3e:46:ae:d4:77:6c:11:35:cf:e5:
40:18:53:38:b2:cf:52:70:67:4a:29:59:60:f0:53:6d:bd:89:
5e:68:4b:16:2b:4b:cc:21:cf:30:ef:0a:45:0c:f1:f5:3c:3f:
c8:44:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:19:52 2025 by rpki-client