Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 3qJLFlOJ2y+e4nA1nqfJenGoGTI4jol3Fc/kJvs82SQ=
Subject key identifier: CF:30:E5:F5:AA:2C:57:B4:1C:71:25:22:1F:0B:9F:73:0D:8F:B4:3F
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01987D1C1E5DAD89220BA632303228C7176D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0C6B
Signing time: Wed 06 Aug 2025 02:00:51 +0000
Manifest this update: Wed 06 Aug 2025 02:00:51 +0000
Manifest next update: Thu 07 Aug 2025 02:00:51 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: gVePasDC5rV0HrXq3Yu4lr6A5WD/F1FWJb5vSXBnTqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:1e:5d:ad:89:22:0b:a6:32:30:32:28:c7:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Aug 6 02:00:51 2025 GMT
Not After : Aug 7 02:00:51 2025 GMT
Subject: CN=cf30e5f5aa2c57b41c7125221f0b9f730d8fb43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:4e:b5:b1:c6:65:ad:c5:5a:99:e3:0a:ae:
bf:e0:42:fe:7f:d2:bb:a5:95:45:35:5f:dd:50:12:
e0:7d:80:8d:74:44:8b:42:b2:0d:fb:39:0a:4a:ae:
b0:af:93:33:62:df:19:38:60:fc:68:63:99:42:f5:
98:7f:1a:3a:3c:33:1f:23:50:7f:08:b3:bc:03:c2:
b9:9c:be:dc:36:e3:38:c3:c9:4b:91:aa:ed:3b:78:
72:29:4d:6c:f2:cb:a3:1b:51:8b:15:8e:96:9f:14:
68:49:96:23:67:04:de:90:a8:61:26:07:34:d2:c8:
ae:a9:c5:29:1b:17:6f:b5:c2:a5:ce:f8:46:98:86:
29:9c:86:e9:df:5d:88:87:01:2e:50:6a:97:c7:62:
bc:20:8e:8f:ad:d2:77:d6:1b:c7:f4:4a:e4:c0:a9:
35:19:79:ec:5e:ee:f1:85:02:99:ac:5f:86:82:2a:
85:48:ec:f1:d5:05:f8:4b:83:4e:6b:a3:af:f4:00:
be:5d:23:1a:3a:13:bc:42:f5:ae:f4:df:79:1c:3c:
2f:7c:d1:90:77:c2:00:67:5c:af:5b:a0:31:76:26:
4a:27:de:9f:96:00:b6:42:af:9b:92:f5:2a:1c:69:
e2:81:d7:18:c9:66:40:87:5f:14:c6:8d:69:73:40:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:E5:F5:AA:2C:57:B4:1C:71:25:22:1F:0B:9F:73:0D:8F:B4:3F
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6c:23:50:26:ae:11:4d:27:78:09:a9:79:8a:21:62:c0:7e:
22:a9:bd:ce:f5:1b:69:88:00:05:83:6b:24:c5:d5:1c:42:66:
d6:d5:e8:76:1f:50:e1:98:b1:a1:27:96:99:58:42:44:36:91:
f5:98:c5:c4:df:6f:2e:d1:df:4e:c7:62:a7:c6:a6:7f:46:20:
ed:54:c5:5a:59:93:c7:74:d3:19:79:10:59:fc:7e:0f:01:fc:
d9:1a:ed:c2:b8:5e:98:f0:a7:d6:60:69:55:12:af:80:78:84:
ca:1e:f5:db:3f:db:72:ec:80:70:63:77:de:23:dc:78:7b:26:
14:bf:74:05:5b:6b:7c:cb:81:5a:9e:27:21:57:04:ff:f0:6f:
23:68:e6:51:b8:95:d0:64:0e:83:42:42:5e:15:86:cf:40:e9:
ef:a1:69:92:37:e4:33:ac:9a:4b:0b:5b:e4:8f:b6:3e:49:e4:
76:94:c3:49:1b:bb:6f:c4:45:70:35:9f:c2:a4:5a:0c:f9:81:
d1:97:aa:8b:8a:49:de:2b:2c:50:0e:70:86:53:96:b8:66:09:
53:10:07:2a:36:14:88:84:d6:6a:9e:3f:9d:24:00:c9:c6:78:
7c:c6:08:0e:bd:54:78:10:c2:a1:50:52:8d:e6:c2:07:36:16:
40:c5:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:18:42 2025 by rpki-client