Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: FdnuO/dATGaPE+CvsRg3B7eyoOF5Lj2lCQuvY5yxrag=
Subject key identifier: 57:3A:B4:11:4A:9E:BF:88:93:A2:3D:F0:6E:51:41:5F:DE:DC:23:9E
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 0198745009BCC368BF86964B54FAB92DEFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 145D
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: 7EEZb1luJ/9L39qUehIwOXrj+CZxgqHy/gpzKj5hdpk=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:09:bc:c3:68:bf:86:96:4b:54:fa:b9:2d:ef:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=573ab4114a9ebf8893a23df06e51415fdedc239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:8d:be:38:aa:9d:df:06:64:1a:0e:46:66:
1b:5a:4c:1d:a7:0c:a2:2a:27:d2:65:8d:2e:41:da:
44:61:82:4b:f5:e9:8d:f1:c8:db:b1:bd:fd:1a:24:
c7:4d:eb:42:b2:c1:b4:fc:ff:c1:5b:ca:34:a0:71:
fc:59:f7:d4:64:9c:28:89:d9:76:c6:f7:90:69:15:
93:4f:a6:22:ce:b1:22:90:59:b5:c8:52:52:48:d5:
82:c3:bc:df:80:11:c1:3e:97:90:a3:95:b2:e4:6d:
6f:58:5f:35:8c:c7:24:b4:d0:ae:a9:db:ab:f9:da:
04:24:e3:97:9a:88:bd:04:13:69:01:6f:bc:d9:b2:
cf:e0:f9:ad:3d:23:13:a1:ff:a6:0c:8d:e0:f5:2e:
76:90:33:60:21:a2:6e:00:03:03:73:66:b7:91:44:
c1:e9:db:2a:e3:1c:4f:a6:7c:6c:3b:c3:9d:c4:2c:
b2:81:af:de:17:f2:72:9d:25:6a:c9:af:55:2d:a5:
9c:ab:da:a5:2d:eb:bf:6a:9f:29:0f:41:05:a5:92:
ca:b4:ca:3f:ec:9a:bc:ed:9a:f7:65:0a:a6:8e:9a:
f5:e7:44:51:cd:19:18:d4:8e:f3:d2:fa:b9:0e:c2:
4f:23:26:25:7b:b1:02:16:dd:b6:ad:54:a6:7a:27:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:B4:11:4A:9E:BF:88:93:A2:3D:F0:6E:51:41:5F:DE:DC:23:9E
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:94:64:6a:7f:66:d3:b1:07:d1:39:34:93:36:aa:04:36:9c:
ce:9f:9c:b0:60:b5:4f:f9:0b:73:32:e6:81:50:d0:c3:d5:22:
47:f8:5b:cb:96:e7:d7:9f:f3:e3:22:51:89:b7:6c:2a:72:e5:
49:32:ba:41:c4:67:1d:19:b3:67:9c:87:49:0b:26:b7:48:0a:
cb:e4:92:2a:0d:40:e3:39:1e:ef:50:01:92:83:7a:75:c0:00:
15:3b:7d:ec:f7:f5:e7:ea:35:3e:2e:8f:a6:cf:67:d7:53:18:
ff:58:8a:7c:8c:f1:c8:e8:70:9a:9c:b1:1e:b4:78:da:a4:8d:
ae:32:9e:d6:fc:9a:da:bb:8e:f5:18:c7:90:5c:36:54:56:92:
35:00:44:68:27:ce:91:ac:d2:14:e2:39:00:39:94:32:67:0f:
2d:37:84:32:48:a1:0c:32:a9:7c:62:f7:2b:e6:e5:aa:5f:41:
c2:4b:fc:a6:ae:1a:61:b8:a4:97:71:5b:54:c3:6b:8a:90:fa:
9f:de:7b:20:a1:81:63:83:f0:86:71:52:b2:32:bc:89:6a:26:
8d:f0:26:99:d1:53:65:90:ca:b2:e1:51:f8:48:8c:dc:27:c4:
1e:04:cb:a5:ab:2e:21:7c:52:d4:03:f3:ee:db:3d:8f:40:93:
d4:ad:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:05 2025 by rpki-client