Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: nulgcVYa6tjddJGgj0KX2tIRqhsd8aSnooeqJ9HH9To=
Subject key identifier: 3B:6A:06:D9:A6:E3:55:D9:5B:4F:41:E3:C6:72:0E:66:3B:5F:A5:DA
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 01988AA08C83850606CACA8C59D62478B2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 05BB
Signing time: Fri 08 Aug 2025 17:00:33 +0000
Manifest this update: Fri 08 Aug 2025 17:00:33 +0000
Manifest next update: Sat 09 Aug 2025 17:00:33 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: XH0ZD2JgHLvXx1fTrnOqV6k4EXBhYUo7vZbG/cOR3a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:8c:83:85:06:06:ca:ca:8c:59:d6:24:78:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Aug 8 17:00:33 2025 GMT
Not After : Aug 9 17:00:33 2025 GMT
Subject: CN=3b6a06d9a6e355d95b4f41e3c6720e663b5fa5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:ba:97:f3:41:88:2b:93:54:80:f1:bf:d6:
60:a7:9d:d9:e1:f8:d5:c6:02:a4:4e:b8:19:5d:c2:
e0:d5:50:c2:59:d4:84:7c:98:7b:24:34:2b:f0:d9:
87:bf:5c:ab:d0:dd:9e:2b:77:8a:ad:97:5a:f2:e7:
9f:2f:6e:8e:0f:ef:d5:3e:b0:3a:7c:62:d1:43:69:
35:e3:f5:82:65:5d:f2:63:06:09:57:4e:64:93:79:
bf:2b:97:3b:47:c8:4b:ef:1e:f8:2e:85:76:4d:bc:
18:0e:af:ed:e2:83:97:55:27:a8:cf:d6:dc:cb:c8:
61:06:05:e4:78:49:30:cc:f4:93:b8:20:86:ba:25:
11:48:d1:63:5d:85:d7:b6:cb:56:3f:a0:ec:23:4e:
2b:d1:b9:26:7e:2d:34:09:3c:d8:75:2d:f8:c5:59:
52:42:a5:79:41:f0:8e:6c:9d:75:31:c5:07:9e:69:
aa:f4:17:62:31:2a:99:6a:72:e7:43:ba:e8:7f:6c:
81:2f:b0:67:ee:92:77:10:df:7e:75:0e:16:6a:6d:
9f:bf:a0:e0:3e:42:ea:44:30:41:0b:bc:21:99:50:
2f:69:b9:2c:94:d5:2c:92:ee:da:5d:a0:17:dc:e6:
32:2b:62:34:1b:86:e7:e2:9b:b0:b5:ed:4c:1b:5e:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:06:D9:A6:E3:55:D9:5B:4F:41:E3:C6:72:0E:66:3B:5F:A5:DA
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b0:de:22:32:21:66:d7:18:53:40:8a:c2:e2:75:98:db:95:
b3:51:c3:eb:fd:39:2f:9e:1a:eb:0c:e5:be:11:73:10:81:f6:
d1:21:fa:36:01:63:66:9d:6f:bf:af:67:5a:f6:61:e6:5d:df:
ae:9e:1b:f9:51:02:36:23:c5:5e:2a:73:11:85:b4:e5:74:14:
8c:b1:c4:08:9b:b1:bd:72:7c:41:bf:09:67:d1:28:ad:fe:1a:
bf:cf:60:cf:16:25:37:68:5c:8f:51:ea:6b:54:58:56:c8:72:
3c:fd:d4:87:bf:98:4c:7d:e7:d8:db:22:f0:e2:c9:50:5b:ed:
ca:55:19:42:04:96:33:00:16:59:42:8a:33:3b:15:ce:0b:e9:
d0:f6:70:35:3e:93:7a:9b:11:4e:f5:d3:36:06:aa:7a:fc:b9:
99:6e:fe:a5:9b:69:78:64:d8:66:f1:aa:f1:00:53:8c:b8:ad:
ca:0c:ae:f9:50:3a:bd:bc:7a:ef:06:b3:a6:b9:f0:28:ae:ff:
30:83:61:44:a0:7b:c3:89:dc:51:46:82:9a:62:84:4c:8d:c9:
c0:a2:37:66:4d:fd:4b:70:b2:00:3c:5a:bf:9e:8a:1c:f1:2a:
ed:2d:a8:7a:6b:6d:15:52:a9:5f:37:b4:12:5e:a1:61:c9:65:
d7:ae:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:41 2025 by rpki-client