Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: o19Zahcpkz7tKaNqCOy260udIVQ0TdXrYAcBMaFGROY=
Subject key identifier: AA:F9:64:6A:07:9B:43:36:E7:51:C0:8D:F9:B9:87:35:A9:9B:43:EB
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01987418E34CD7E6CBF29B3DABB202DD7A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1372
Signing time: Mon 04 Aug 2025 08:00:44 +0000
Manifest this update: Mon 04 Aug 2025 08:00:44 +0000
Manifest next update: Tue 05 Aug 2025 08:00:44 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: q4FYz/lne0/Y4Kj5flInWO4Yekf0ZyfT8n/iChHKnwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e3:4c:d7:e6:cb:f2:9b:3d:ab:b2:02:dd:7a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Aug 4 08:00:44 2025 GMT
Not After : Aug 5 08:00:44 2025 GMT
Subject: CN=aaf9646a079b4336e751c08df9b98735a99b43eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:20:3b:39:03:49:39:98:56:75:10:00:59:
f0:e7:f7:6b:61:c2:11:a6:09:a2:98:57:6a:f3:85:
8f:db:39:c3:48:92:3b:7b:82:b6:5e:92:75:90:aa:
7c:7a:78:1c:14:e9:19:8b:2d:06:18:5f:29:df:51:
76:3f:21:39:bc:8f:c2:42:71:14:8c:5e:2f:6d:ba:
ee:fd:70:a7:5c:e5:62:f3:0b:fe:4e:e3:7d:a3:ba:
2a:cd:81:df:49:27:51:02:b6:91:8e:87:e9:c9:95:
9e:3f:bd:db:0b:0b:61:53:cc:51:ee:81:10:49:06:
5c:fd:6b:1f:43:c4:80:e0:7e:83:bb:06:92:d6:6c:
8a:d4:50:ff:28:63:41:c2:3a:7b:8a:d3:16:7f:f4:
e1:41:94:d9:4e:ca:76:97:96:3d:16:b6:97:1e:62:
3a:3b:fa:f6:80:51:65:23:23:70:c2:83:4c:55:92:
9e:db:25:8a:35:ae:c6:3c:4f:e0:6f:45:1e:4f:75:
15:04:77:8a:03:69:e7:54:20:87:50:0f:a0:ee:62:
ab:34:02:c0:7b:5a:7b:ac:66:8a:7b:39:23:e1:55:
d9:27:a9:c5:66:4e:e4:db:4f:bb:7f:4c:5f:a5:cc:
cf:86:2c:a1:bb:07:f4:f1:d4:5e:d7:8c:ac:41:3b:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:64:6A:07:9B:43:36:E7:51:C0:8D:F9:B9:87:35:A9:9B:43:EB
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:43:c3:73:21:d1:3c:d9:f2:53:ce:37:7f:0d:a1:92:3e:
76:da:f3:ee:e7:53:dc:6c:e9:9f:7c:c2:5f:3e:ea:7d:81:c1:
94:df:0d:e9:43:05:69:46:37:c9:3c:f1:66:39:07:8a:ee:16:
d9:e2:58:98:61:92:e7:30:c2:d2:88:8d:ff:f3:7e:4e:aa:2b:
23:11:b0:86:fe:db:d1:11:4c:ff:8d:4d:e1:de:7a:32:33:83:
3a:33:91:e1:e9:0f:61:2d:b4:82:89:e6:17:aa:22:ad:d2:3b:
58:73:86:1d:60:84:d3:c5:07:15:51:c6:a9:cc:ff:e2:f9:81:
18:e7:88:37:72:87:ce:9a:c5:9e:94:07:53:8e:9e:85:27:61:
fa:7b:0b:5b:b1:d2:5b:39:b8:24:34:db:46:b6:21:c2:45:82:
e3:2d:03:36:52:1d:7d:c1:0b:5b:f0:ad:7a:2c:c4:50:05:8f:
09:c0:13:ec:b3:b3:52:a5:27:a3:23:c4:ec:13:0f:ec:b1:1d:
e0:96:32:17:60:6a:52:2d:df:8d:96:44:f9:b7:42:97:15:f4:
a3:69:0c:05:30:61:e2:33:bd:ef:f8:f7:8e:87:db:1b:74:fd:
4c:ab:f7:6f:92:7c:4a:ac:4a:d2:40:d1:70:64:66:1b:1c:b2:
78:93:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:21 2025 by rpki-client