Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: G8mevK0o+UsDmjFds02V3maUdfshoX2s+uIwNaWgVgs=
Subject key identifier: 5B:C6:A4:0D:0B:77:8C:13:69:BF:00:85:9F:B5:59:7A:AC:24:18:D5
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01987F0AABC0914040097845A0511BFDEDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 11:01:02 +0000
Manifest this update: Wed 06 Aug 2025 11:01:02 +0000
Manifest next update: Thu 07 Aug 2025 11:01:02 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: thALozXH0Z5PUoh+QZJVmrKbL/qQrqpUjWA+32S/OUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:ab:c0:91:40:40:09:78:45:a0:51:1b:fd:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Aug 6 11:01:02 2025 GMT
Not After : Aug 7 11:01:02 2025 GMT
Subject: CN=5bc6a40d0b778c1369bf00859fb5597aac2418d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:44:b0:f9:63:fa:20:4e:92:b2:07:63:e3:
e6:86:12:b5:6c:20:a6:72:e5:39:a2:a1:9d:f1:68:
47:52:cb:6d:16:4f:ce:84:f3:03:14:32:5b:c9:93:
9d:c1:e4:ce:5a:65:86:bb:a3:e8:bc:dc:86:55:b8:
77:03:1c:4e:5e:ae:9c:bf:90:c5:82:e7:f6:7e:4e:
52:e1:38:a6:13:80:ff:74:38:17:94:0f:79:aa:f9:
e2:6f:3c:7e:c5:b1:98:49:43:a8:95:d9:23:96:f4:
10:f5:c7:95:7b:5d:82:d4:cd:d1:e8:30:0a:f8:ec:
1d:71:4d:ab:2f:a1:51:14:89:d0:d0:f3:e1:7d:f6:
db:5a:d0:e8:8f:2d:5e:0f:51:ba:ea:ed:e4:ff:dc:
80:e0:2d:40:21:93:51:bf:a0:f0:c1:99:36:60:f9:
4b:86:e6:8a:3d:34:31:ab:d5:77:f1:3e:7a:1d:f5:
93:ea:39:4b:15:1c:61:0d:7d:83:98:64:ae:54:7f:
4a:74:20:d1:25:60:07:d9:df:26:35:0f:56:19:a3:
f6:fa:df:d4:16:44:a2:ad:79:f2:14:11:a1:cd:15:
85:c1:7f:c4:ec:9f:28:6a:a4:35:78:8f:d5:02:ed:
0f:8a:77:73:03:fa:28:99:d2:e9:f9:8b:a3:1c:7a:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:A4:0D:0B:77:8C:13:69:BF:00:85:9F:B5:59:7A:AC:24:18:D5
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:35:82:56:ef:7e:da:28:6b:be:ce:96:e8:46:48:f7:4b:
ae:9f:36:c2:2c:0f:ce:88:21:88:f3:05:5f:8f:73:67:8e:cc:
3a:e2:9d:d7:5c:f0:89:2b:41:b6:2f:5b:54:55:bc:c6:68:7f:
0c:f1:8b:34:40:6d:0c:7e:a6:bf:00:38:01:f4:58:8a:07:50:
86:a7:b1:15:cc:7f:4d:ab:51:c9:bb:04:8f:fc:d1:3d:40:af:
00:9f:86:bf:2e:b8:ff:b0:a8:c6:a6:e3:8b:30:4c:c5:ad:9b:
b0:5a:b3:53:c8:3d:fa:57:df:a3:72:86:54:55:6d:c9:6b:25:
d1:af:a7:51:0f:34:cd:c1:33:0e:4c:07:dd:6c:70:85:a3:9b:
22:62:a1:a1:fd:c5:62:c3:2c:a5:14:e6:d4:a4:a5:a1:22:6b:
2f:e9:0d:3f:fb:76:4a:18:22:e6:c5:25:84:78:6a:c5:f9:0c:
51:c0:fb:15:ed:81:38:e0:7e:88:ba:53:60:26:aa:13:ef:ce:
ec:e8:3d:b4:32:14:82:80:e4:cf:66:39:3a:f5:c2:cf:dc:73:
c8:12:c5:87:72:3a:cf:ed:04:a6:45:c2:27:09:b1:a7:4e:4b:
e2:bb:be:ef:0c:e3:59:bd:88:b4:15:b0:39:b2:62:2f:52:a1:
01:0a:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:01 2025 by rpki-client