Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: JiyGHD/dsViQ5PDjjvxZjYdjNS8XBicmnU6ZPPk87BE=
Subject key identifier: FC:EF:98:1B:A4:54:2D:63:B6:EA:F2:68:27:97:29:99:B9:AF:F8:12
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019894B63BDBC5FF30D0DFE3D1D6AE2DA878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0EAB
Signing time: Sun 10 Aug 2025 16:00:27 +0000
Manifest this update: Sun 10 Aug 2025 16:00:27 +0000
Manifest next update: Mon 11 Aug 2025 16:00:27 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: WEeCk1B3WBVt5IFdQDdOAB+jZzHTGlK8HfmTCtSS9jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:3b:db:c5:ff:30:d0:df:e3:d1:d6:ae:2d:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Aug 10 16:00:27 2025 GMT
Not After : Aug 11 16:00:27 2025 GMT
Subject: CN=fcef981ba4542d63b6eaf26827972999b9aff812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:23:cd:ed:1e:59:ec:45:84:31:33:1d:4f:
98:05:94:f6:bc:32:1f:21:30:4f:36:8d:4c:a2:7b:
eb:ad:9d:14:3a:76:a5:0a:08:a5:b4:c1:dd:11:b6:
f7:c3:30:0c:ee:7c:86:70:6e:95:37:af:d1:03:19:
f5:90:bf:62:27:5f:94:e2:1e:a6:6d:c7:8e:46:70:
7c:55:5f:67:d9:36:e9:06:bd:52:c5:c9:01:f5:27:
fa:e6:17:bc:6f:87:75:b0:47:6d:93:4b:47:88:49:
5f:36:da:ba:d4:e9:bc:b5:0f:ac:08:c4:cc:79:cc:
40:b8:bb:38:58:c1:43:81:7d:a3:75:1f:6c:c9:38:
9d:26:3b:f4:0e:8c:9d:4e:30:32:b3:f8:25:5c:5f:
16:42:94:00:74:81:f1:70:fc:69:4b:e0:ff:38:f7:
6a:72:d2:e3:9e:44:1c:41:27:da:95:1c:6d:c9:93:
70:24:1c:2c:bd:93:93:7e:b3:fb:6e:42:7a:37:d4:
6e:c0:1d:74:46:dd:49:5d:0f:a0:9c:d5:ca:ea:b7:
04:bb:c2:1e:89:34:30:76:bb:e0:78:e2:e6:e6:a6:
8f:17:e6:cd:03:04:a0:68:2e:9d:a8:ff:c4:48:a4:
53:4a:c0:89:8d:0c:0e:de:e4:a8:88:44:3e:5d:a0:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:98:1B:A4:54:2D:63:B6:EA:F2:68:27:97:29:99:B9:AF:F8:12
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:64:34:4d:b8:ca:d6:72:46:4d:45:4f:07:3c:05:f6:f1:5b:
3a:52:72:16:e4:39:ba:3e:9b:ae:1f:b6:dd:64:54:29:9b:f8:
bd:f2:d0:94:1a:7b:f0:84:60:7b:8d:c7:45:8b:69:12:a0:97:
53:fb:16:19:ef:52:90:90:9f:11:85:fb:65:9c:31:95:38:1d:
29:fe:cb:8b:a8:ad:60:7e:cf:60:b8:8f:83:d3:3b:43:39:51:
08:b2:20:e1:82:db:e8:1b:5d:59:d2:fb:f1:9e:fa:d6:a2:06:
8b:65:8a:d0:ed:ff:0f:6f:b4:91:57:f2:bd:4f:34:5e:f3:56:
87:1f:8e:fb:4e:bc:69:45:8b:1a:92:75:14:52:66:aa:5d:2c:
b9:3c:07:98:a1:4a:b4:f7:3f:c4:1f:91:55:5d:4c:aa:67:44:
7e:d6:7f:b0:fc:49:bc:d0:63:77:d9:36:d1:ae:53:5d:9d:f0:
ef:ac:0f:f0:f2:51:b4:8b:c9:c2:84:d1:0f:93:f9:b4:69:9a:
d2:a1:1b:dd:52:20:b6:e6:a0:6d:26:30:b8:b9:d6:3c:73:49:
e5:a3:b4:1e:24:e1:f3:85:1d:e4:c7:db:ff:2f:87:ee:53:c2:
c5:85:aa:5a:a6:04:0a:8a:8b:ad:fd:46:af:ba:92:71:78:75:
da:95:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:53 2025 by rpki-client