
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: rVd93VVh+E5ucp8pTdRF2BplBP9HbFPmeezydQgr78o=
Subject key identifier: 0E:88:41:4F:C6:47:B3:BD:93:8E:95:D9:16:E3:BC:5D:75:63:9B:33
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 019872CF4A4A1C82B3C0A68F9C9E6DECB684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 15A6
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: a6Ltvy4HqHEzgS+aNEm7jpnZuBcn9a/M95Z1wvEjE28=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4a:4a:1c:82:b3:c0:a6:8f:9c:9e:6d:ec:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=0e88414fc647b3bd938e95d916e3bc5d75639b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:8c:49:52:3f:ae:14:c6:f4:8e:4f:e8:6c:
47:00:09:49:89:0e:3d:b2:01:29:0e:ab:ac:75:8e:
ef:f6:c6:12:d8:6a:58:23:a7:33:b4:92:1c:e9:7d:
ad:0d:8c:54:ae:e1:af:11:11:60:c1:b4:03:bf:82:
3f:2b:c2:2e:17:a8:d8:54:55:31:01:43:3c:47:ff:
f9:7f:03:06:00:43:76:90:c4:5d:da:fa:5f:dc:1c:
f0:c8:74:99:a8:9a:82:47:2e:e6:ce:18:cd:a7:d3:
c8:32:cd:61:57:6d:d6:cc:3a:74:47:71:0f:e1:fe:
ce:c0:b9:ba:1e:88:7f:c9:ad:0a:4d:70:70:1c:ac:
00:6c:a9:11:81:17:fa:f1:94:01:04:ad:99:d0:ae:
da:b7:03:46:30:1b:3d:98:8a:6f:b5:25:78:59:81:
d4:e2:c4:50:8a:c6:8f:f2:96:31:ae:d0:93:14:8a:
77:16:e4:27:47:f3:1b:b2:32:7c:7a:14:94:97:62:
ba:0b:ba:d6:65:a6:9e:b6:79:37:39:d2:bb:35:0e:
44:5c:9f:d0:b3:bb:25:97:de:13:ae:19:bd:b6:b2:
f2:9b:81:65:b4:95:8c:3e:f2:19:de:62:87:0b:2f:
39:bb:55:48:b8:5c:6f:fe:06:7a:53:e1:c0:db:8e:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:41:4F:C6:47:B3:BD:93:8E:95:D9:16:E3:BC:5D:75:63:9B:33
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:c7:c2:20:e8:43:8a:c3:72:8c:9c:68:6b:60:f0:08:58:
09:fe:04:46:01:b1:cf:f4:6a:21:c6:a9:a0:8f:8d:2f:d1:ac:
4c:19:d2:f3:da:93:76:5b:ac:d2:30:bb:ab:5a:ae:ad:39:8f:
28:ec:22:0d:4c:a4:9b:7d:9b:d2:fb:6e:4d:2b:f2:e7:1e:f2:
7d:b2:dd:ee:23:2b:b5:8a:17:ba:c5:13:85:42:14:96:01:c9:
56:36:cb:6c:d9:41:4f:8e:a3:af:bb:e9:78:fa:79:7c:1a:8c:
75:b4:5b:89:83:83:af:92:a0:19:82:64:ce:a2:82:3a:63:e5:
8f:d4:5b:1e:76:d9:ba:f3:0a:2b:34:81:eb:58:c1:5b:4f:16:
c9:c6:97:08:4d:2c:c6:84:c9:c5:c0:a9:1a:a8:9b:3f:df:95:
b9:35:99:50:b9:54:e0:5e:35:03:cf:55:79:3d:8e:c9:22:27:
91:bf:e9:2b:ab:32:f2:af:bb:e1:6c:0d:e1:b9:76:63:28:a0:
1a:c6:d2:61:dd:8c:20:f7:fb:03:23:ca:82:77:31:bd:c3:7c:
af:b9:08:c9:83:2b:bc:56:70:8e:42:d4:aa:39:7c:35:55:6f:
5b:cd:db:b1:99:24:0a:7e:ac:9f:ac:37:0b:6d:81:b5:d6:f5:
3d:1d:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:54 2025 by rpki-client