Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: g/4annpLCGoNa3BMpEs1X0UG/LfQsfTmcpnAJcV1f3k=
Subject key identifier: 6E:D5:65:C4:95:07:20:70:AF:58:97:A7:F6:C8:46:B4:56:3E:6E:71
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019894B6CA6EE867DC84C20610B46E82A470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:03 +0000
Manifest this update: Sun 10 Aug 2025 16:01:03 +0000
Manifest next update: Mon 11 Aug 2025 16:01:03 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: BaSnPKBwhxT0uEOqEiVrypEik3D/kuvKs5Xa9ozzP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:ca:6e:e8:67:dc:84:c2:06:10:b4:6e:82:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Aug 10 16:01:03 2025 GMT
Not After : Aug 11 16:01:03 2025 GMT
Subject: CN=6ed565c495072070af5897a7f6c846b4563e6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:8b:1d:d9:2b:b1:dd:23:35:71:3b:38:c9:
d7:2b:09:14:14:5b:92:ec:47:b3:c7:63:23:f9:15:
56:3d:70:dd:21:e8:99:2f:40:78:0b:ef:30:33:d0:
a8:1d:0c:fb:01:16:db:06:f1:b7:86:08:3b:90:84:
98:83:1e:bd:52:eb:43:fa:ae:35:42:2f:5c:28:e6:
f1:04:8f:1f:57:b0:dd:99:56:ce:ce:e2:01:c4:57:
63:a6:4a:34:8d:ff:72:40:46:77:bd:5e:b6:c6:bc:
b3:7d:d8:a6:e5:b0:36:9b:e8:78:eb:7a:f1:27:ca:
47:70:02:64:9e:84:17:61:e8:4d:24:04:92:e3:41:
4f:37:93:b2:12:a9:3d:c6:d8:02:61:e6:c6:6c:93:
ac:c2:be:8d:30:11:60:cd:93:a4:06:92:42:a4:d2:
59:3e:7e:a6:2c:51:e5:28:54:93:ed:f7:65:5c:a1:
b4:7d:55:58:84:ff:6f:4c:8d:e7:18:38:c1:d1:b3:
84:b4:96:94:38:fe:1c:51:c5:0b:3e:92:c3:56:db:
c9:ce:f1:d8:b6:90:05:8f:23:78:40:aa:15:b1:91:
e3:03:2a:04:a9:24:47:a9:4b:19:2e:87:fa:43:bf:
6d:d8:f3:49:44:c6:71:44:ac:91:94:93:1e:8c:df:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:65:C4:95:07:20:70:AF:58:97:A7:F6:C8:46:B4:56:3E:6E:71
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b9:48:8e:3f:75:e6:55:b3:1b:10:b7:2a:42:c8:a3:a2:36:
33:ae:21:cd:c6:7c:6c:9f:de:8f:95:60:5f:15:82:0e:01:36:
89:85:59:2b:7d:7e:0a:90:7d:be:23:6c:fd:be:3b:02:b2:19:
44:38:7d:d2:09:3d:fc:7a:86:8c:b6:39:e9:f6:f1:21:5e:b2:
b1:08:4b:9d:6d:48:66:4d:21:7b:0a:a7:23:e5:af:50:9e:4a:
43:c5:77:83:4d:40:ae:86:88:44:2f:5c:10:c9:3b:18:cd:c7:
e8:36:9b:c5:99:c3:c6:55:7a:6a:0a:5a:49:d4:59:c9:17:9f:
9b:0c:7a:95:39:e5:54:e7:2c:23:de:70:6b:ac:f6:05:10:bb:
5a:7c:01:bf:91:50:3d:1b:78:dc:93:a0:2d:41:1c:5c:ee:73:
eb:c2:f8:bb:72:17:0c:33:ae:0b:4f:46:d9:74:9e:5b:50:df:
81:c1:86:72:56:e1:17:e6:99:f1:ee:ec:41:fe:10:74:c7:d3:
01:76:ce:68:7c:b1:34:7a:fd:36:2d:ac:d4:68:5a:2a:f4:98:
e2:e6:3d:d6:16:0b:a9:4e:84:c4:4d:67:90:7e:d1:0d:d4:d5:
64:a6:42:54:2c:70:62:fd:9f:1d:83:ac:2c:24:98:2e:32:1f:
e7:65:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:57 2025 by rpki-client