Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: qRhhlJVvPvcc814ttH6pXp0wcjUZ1Zz9Wqbh06+k8H8=
Subject key identifier: 2F:F9:AD:DD:8E:21:BD:F2:7C:E8:6D:A4:EA:F1:A0:E7:78:8D:19:7B
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01988F22448F94186B1BBD7E3212115697E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0ACF
Signing time: Sat 09 Aug 2025 14:00:44 +0000
Manifest this update: Sat 09 Aug 2025 14:00:44 +0000
Manifest next update: Sun 10 Aug 2025 14:00:44 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 1lg3e7yyzXYB1l5j2btvNorz8oy4Ocwahq460FckGjo=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:44:8f:94:18:6b:1b:bd:7e:32:12:11:56:97:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Aug 9 14:00:44 2025 GMT
Not After : Aug 10 14:00:44 2025 GMT
Subject: CN=2ff9addd8e21bdf27ce86da4eaf1a0e7788d197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:61:1a:39:9c:6f:de:fa:f3:5b:da:ea:0c:
af:ac:54:bb:2f:13:9d:9e:b9:a3:e9:bc:a0:9a:e0:
0c:d5:cc:fb:b9:04:bf:3a:aa:d6:01:7e:de:95:d4:
aa:0a:2f:22:32:c8:a3:55:5d:2e:a0:55:b6:37:1c:
bc:49:1a:7c:08:c0:16:5c:3d:3e:36:9e:11:71:72:
85:1f:21:6b:24:19:37:25:ff:dd:c6:dd:df:bd:f5:
06:7c:83:56:6e:82:8d:2c:e8:e4:a0:7b:d5:92:8c:
83:7f:a6:8d:ae:eb:76:92:54:a2:ea:7c:fd:52:ac:
e6:66:43:fe:fb:f8:46:44:c8:f0:5c:1a:74:cc:df:
5f:56:c4:3a:b5:64:eb:3b:60:c1:22:15:8e:94:bd:
85:27:de:87:6a:67:c5:a1:36:5d:00:d5:52:79:66:
27:e3:cd:f3:46:08:26:93:24:7a:47:f0:98:79:51:
a3:67:1c:1b:95:11:3c:ff:a2:f6:a2:b9:22:54:e3:
44:8b:60:3f:53:7a:9e:e6:ee:8a:1e:c1:8f:63:11:
d9:ed:e5:8f:eb:be:28:53:88:69:8a:a3:f9:96:e9:
7d:ec:e7:0b:d6:21:20:50:3d:ae:28:97:82:9e:b9:
b8:1d:64:f8:ac:37:d8:07:f7:10:ac:c8:d3:1d:e7:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:AD:DD:8E:21:BD:F2:7C:E8:6D:A4:EA:F1:A0:E7:78:8D:19:7B
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ba:08:1d:6d:73:22:c3:39:74:fe:fb:1f:e2:94:2c:ee:94:
8e:81:d0:c8:1b:4c:e1:23:39:f6:36:e7:59:69:d3:cb:67:6b:
e7:f8:b3:9d:6b:0f:61:3a:14:6e:11:d8:63:b4:cf:8d:5a:1c:
f6:f3:96:1b:b2:60:11:17:a8:b4:cf:be:07:25:eb:c9:32:0c:
23:65:45:28:d6:50:30:23:e9:12:fb:82:d4:bf:2e:12:92:0a:
08:18:2d:9f:aa:65:95:10:1e:16:bf:3c:02:69:87:fa:70:3d:
81:e9:8c:06:d0:12:f0:43:6d:12:04:3f:1a:f0:f9:f8:69:c0:
df:a9:2f:83:04:8d:e7:d3:1f:3d:c1:6a:f5:95:c7:fe:85:44:
11:35:86:f0:a5:fa:71:96:bf:c5:d5:3b:9a:77:a9:35:d4:8c:
93:74:16:5a:a7:0c:52:f0:f6:f1:0d:31:5c:50:c2:1a:e7:17:
75:b1:dd:dd:dc:2c:99:d6:e9:d3:01:be:ec:e8:b9:c6:ee:07:
18:9d:ac:4a:3d:90:54:2e:72:06:c1:ec:0d:9c:04:2f:60:a1:
6b:c5:36:f1:28:93:6c:57:a7:f7:a0:d1:81:83:c0:56:9c:00:
1f:06:45:55:4f:86:c8:2c:c2:29:17:2f:c7:47:ba:5e:67:2a:
b3:75:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:42 2025 by rpki-client