Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: 5yWmDhtngRto0FpCgepOUEYAB0JUi8f7fXNNDXRpKJ0=
Subject key identifier: 98:7D:8B:55:7E:C3:EB:3A:D1:AD:F6:85:A3:88:83:98:F4:4A:14:DA
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01987418B574C19FF5FFD81AEF3C83ABE3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: d4Ryjr4TeFSyeaeX0/8jBH8l6OnkWk1C5b7JDxtx864=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b5:74:c1:9f:f5:ff:d8:1a:ef:3c:83:ab:e3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=987d8b557ec3eb3ad1adf685a3888398f44a14da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:e9:39:1f:da:11:46:33:e6:1e:34:aa:a5:
d9:12:70:8e:41:fb:0e:7c:49:9f:fa:51:52:9f:ad:
4c:26:15:98:e9:6b:54:ef:9b:ab:dd:e8:db:00:f8:
40:e8:8a:06:ec:bb:5a:03:d4:4d:dc:54:36:86:45:
1b:ff:b2:65:4e:ea:39:e7:6e:4e:c4:33:07:49:82:
5f:ed:4b:24:93:1e:f3:55:bb:c4:a8:bc:03:90:42:
17:c5:f0:24:48:92:e8:d3:34:45:be:d8:c6:41:66:
e8:01:d4:cd:d5:23:46:9f:04:0b:25:6c:9f:d0:b2:
29:6c:f8:7e:3c:05:d3:68:eb:de:c7:4e:f4:03:b5:
f3:ec:40:94:9d:f8:fe:b0:42:4f:b4:1e:7a:fd:42:
09:60:1b:8f:39:ec:59:1a:82:cd:73:61:26:83:c9:
83:cb:57:02:05:55:95:99:74:26:d2:d8:0e:ea:b3:
1a:1d:cb:24:69:f8:cf:af:64:7e:5a:e0:55:b2:39:
cd:66:10:a3:8b:9f:d3:5f:20:c2:c3:43:e8:c6:51:
cc:d6:8c:9f:b5:93:72:ed:54:2e:2d:a6:a0:ef:23:
f8:9c:6f:3a:4d:87:1c:37:53:e1:89:57:e8:1d:06:
55:e5:8b:1b:d0:78:91:00:b4:f5:f7:55:0a:7c:42:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:8B:55:7E:C3:EB:3A:D1:AD:F6:85:A3:88:83:98:F4:4A:14:DA
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c8:03:90:05:69:a5:8a:fa:a0:3a:77:45:02:3c:b4:05:5a:
e4:12:86:81:0e:cd:c2:a4:ca:4b:e1:8c:dc:ce:a5:27:31:9a:
3e:61:d2:56:4e:52:64:10:1b:fd:eb:4c:e6:d2:5c:31:e0:6c:
75:68:0f:9b:0c:a3:17:9f:12:aa:b2:60:54:d1:90:82:96:a8:
e3:14:f7:8c:4d:9c:8d:a0:9a:7a:c7:eb:c3:e2:a1:1d:87:a5:
dc:8c:3f:49:8c:40:6d:10:a6:04:31:49:7e:3f:20:87:66:de:
7d:84:6f:3f:1e:43:dc:d4:e1:6d:fc:d6:47:03:39:09:10:6b:
94:3c:0f:76:b8:2f:7c:29:44:6d:a6:5e:f3:69:8b:c0:74:56:
b4:09:d2:29:3e:22:58:9d:e7:45:92:eb:45:62:ff:2d:25:fb:
66:fd:ef:fa:2a:14:9d:86:b5:16:bb:6e:aa:bc:fa:f7:c1:f8:
e1:bf:2e:f2:b1:23:b9:26:bf:2e:56:dd:13:7a:c2:85:b9:8a:
13:e6:92:14:3f:10:24:86:5f:65:b4:6c:7e:e8:74:f1:25:b3:
ed:79:dc:58:d7:82:86:f8:4b:64:ff:a6:a5:02:ba:a3:3c:9a:
9e:a4:28:d7:99:94:2e:42:13:f2:27:ec:d7:6a:4c:28:dc:f4:
56:1c:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:15 2025 by rpki-client