Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: Y4UW/zSsbCnDiFO/YV+2DdtJTfvnRnuzRWLH9hKoUfo=
Subject key identifier: 2A:C1:B0:39:DB:77:EB:17:BA:65:15:E7:9A:30:F6:54:81:FC:26:5D
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0198827951A071B8D863799D17085A1C2C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 03:00:45 +0000
Manifest this update: Thu 07 Aug 2025 03:00:45 +0000
Manifest next update: Fri 08 Aug 2025 03:00:45 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: YmfojgR9WyYGxqAKp3WJ0uN+Ea/XxfcxjAWopz9FERY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:51:a0:71:b8:d8:63:79:9d:17:08:5a:1c:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Aug 7 03:00:45 2025 GMT
Not After : Aug 8 03:00:45 2025 GMT
Subject: CN=2ac1b039db77eb17ba6515e79a30f65481fc265d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:e1:cd:2f:59:f9:fa:8f:a1:0f:8b:07:e0:
53:e7:3b:f8:4c:6b:17:18:6b:e6:23:14:4f:0d:87:
ee:4f:83:9d:3c:dd:90:f8:10:cf:24:50:30:9d:79:
eb:fb:27:1a:37:c7:58:37:fa:e6:7b:2c:43:7f:ad:
88:ef:cc:88:a8:74:c1:04:19:3d:96:e0:11:1b:2e:
33:2d:30:8d:30:be:94:ae:10:f2:5f:a6:32:29:92:
62:a3:5e:f8:3d:b4:01:a7:ed:b6:2c:a3:33:e8:be:
71:d8:6e:10:8c:44:5e:c9:d1:c4:a0:08:ba:70:c1:
97:c7:f8:ce:03:db:06:92:9a:e6:14:5b:89:e5:84:
15:31:5f:1b:3d:73:bc:40:7d:ce:19:d9:dc:3e:8f:
99:c8:9a:2f:fa:26:8e:17:fc:0f:98:08:30:7c:74:
83:1d:4e:22:0f:92:f5:99:fd:ea:9d:06:80:f7:32:
46:22:06:4d:9d:af:39:ea:58:b1:e3:32:2d:de:42:
de:83:49:6d:a7:bb:35:57:47:71:a0:29:dd:31:e2:
e5:12:e8:b9:50:93:34:bf:13:87:26:8f:32:14:0b:
b2:00:d3:00:8a:46:21:b1:db:7a:f5:b9:50:17:aa:
9f:9a:5c:75:80:b9:8c:bc:64:51:e1:dc:4e:fd:f9:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:B0:39:DB:77:EB:17:BA:65:15:E7:9A:30:F6:54:81:FC:26:5D
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2a:b1:8f:80:df:34:82:9a:f0:95:71:a1:4d:64:a1:2e:f3:
cc:a8:43:0b:4e:56:d6:25:ac:0a:7f:90:f2:88:5d:2b:f4:99:
4f:bb:6c:3b:19:cf:e8:3d:a0:59:f0:3e:5f:a3:e8:07:86:b1:
cc:e0:e8:19:9a:70:f8:87:7f:9e:30:6f:68:28:39:a2:c9:23:
40:c4:de:60:64:62:40:92:ba:b6:ac:a5:09:fa:be:28:d0:e9:
45:0a:b3:00:82:03:e1:9c:30:8c:9f:a6:08:fc:50:09:4c:58:
51:24:bd:b0:d8:3e:22:80:34:b4:db:bc:cb:83:fe:15:c2:72:
7f:b8:1e:0e:50:4b:14:25:59:28:6e:bb:aa:2a:b0:e3:ae:ea:
22:94:6b:0f:2c:78:52:6e:87:63:6b:89:f3:21:01:1f:73:12:
0c:cc:b1:04:3e:d9:c7:00:1d:ce:39:14:ff:72:cd:be:e7:38:
17:43:51:34:b4:45:94:ef:a2:1a:8a:d2:1b:8e:74:6d:56:bc:
f1:e3:38:a4:08:77:3d:18:8a:e6:fb:11:45:e1:9f:36:1d:05:
61:7a:8b:bb:4f:46:76:1b:8f:b7:52:a8:ef:37:23:3e:ff:67:
7e:09:db:d8:92:eb:49:0e:f9:5e:74:24:c0:2d:1c:e8:a7:6b:
db:a9:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:20 2025 by rpki-client