Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: xL488dvSGA71Uj6kRXMQUmQQ6+/OqQ2GMlXPhlr+dvk=
Subject key identifier: 5C:A2:78:DF:C8:B4:C5:50:CE:1F:A4:1A:74:C1:64:C7:1D:B4:5A:C9
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 01988BEADAAAA1299A19AA8341E87370D611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 056F
Signing time: Fri 08 Aug 2025 23:01:21 +0000
Manifest this update: Fri 08 Aug 2025 23:01:21 +0000
Manifest next update: Sat 09 Aug 2025 23:01:21 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: XoAkAJAMV8cEHSwdzu1v9J2gM6y2KRYn79a64XTzlX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:da:aa:a1:29:9a:19:aa:83:41:e8:73:70:d6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Aug 8 23:01:21 2025 GMT
Not After : Aug 9 23:01:21 2025 GMT
Subject: CN=5ca278dfc8b4c550ce1fa41a74c164c71db45ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:83:6f:a3:f9:78:88:36:c3:0b:8f:a1:c1:
b6:de:d0:a7:59:87:c2:d3:2f:9a:1b:cb:0d:70:f6:
d0:53:46:5f:bc:54:7e:41:05:7f:15:bf:28:7b:d9:
d0:5a:46:61:7d:c9:8d:ab:11:5d:fc:7e:0e:06:19:
20:c4:4e:0c:5a:f5:3f:93:b8:ca:5e:8e:d5:c4:ba:
77:01:f7:f9:9a:00:8c:7e:3d:b8:23:30:a0:ad:a3:
a4:ad:48:b9:57:db:25:da:de:b4:0a:27:c3:4c:3b:
a6:c6:bb:0d:1e:70:ba:b3:06:85:f6:cb:44:2c:04:
d0:10:ec:3b:20:a9:70:2e:79:b8:0c:d9:6c:51:01:
6a:a0:a8:6c:e2:af:1f:3e:4f:18:c7:11:7b:0e:5f:
66:8c:94:6a:75:58:b5:5d:8d:f6:66:65:83:7c:62:
1b:13:30:b3:80:b1:00:c1:4a:8f:0b:64:54:4a:95:
c5:a4:3a:6e:10:dd:cf:ba:3e:77:13:82:ae:83:73:
6d:49:99:f7:9f:3f:2a:66:37:f1:11:51:37:a3:73:
cb:7b:1c:dd:31:40:ac:1a:72:b6:de:a3:84:93:fe:
79:d2:06:b8:3e:79:25:02:65:b2:91:0e:d2:ae:0b:
0c:47:95:0a:1d:b9:7b:21:13:e2:46:56:b8:6b:0c:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:78:DF:C8:B4:C5:50:CE:1F:A4:1A:74:C1:64:C7:1D:B4:5A:C9
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7e:de:17:cb:c4:55:a4:68:de:df:bd:9c:32:80:2b:ec:09:
ee:83:cd:ce:c7:fd:a3:3d:d4:8d:08:94:8a:ef:59:ac:44:cc:
b5:69:c4:1d:5e:0c:c7:a3:2d:33:f7:38:df:af:2b:63:c7:62:
79:58:9b:60:32:0f:6c:71:84:64:e2:a8:8f:ee:04:a0:a4:f7:
cb:9a:1a:6d:fe:4e:b4:21:29:f0:33:fc:d3:61:1e:2e:b5:24:
33:37:10:8d:fe:9b:9b:e9:c8:5c:1f:e5:bc:16:1b:3a:bd:54:
59:cb:fd:ce:c3:af:a6:41:e3:0f:14:c1:b9:c9:0a:a4:b5:33:
34:aa:5c:d8:c6:48:82:b0:61:79:d4:6a:f1:1e:c2:38:d5:0a:
94:59:57:b9:73:92:07:84:e1:ca:9d:29:89:57:f0:f4:14:63:
4c:c6:06:24:81:52:05:25:86:2e:68:f0:35:99:b3:96:be:89:
ed:f1:a6:a3:1f:8f:2f:9e:53:90:f1:b5:6d:37:32:cc:8a:e6:
b0:3c:c2:0a:00:d6:1b:f2:75:7b:17:02:70:f3:de:00:52:66:
b9:47:d6:26:9e:29:25:7c:93:91:4a:8c:c8:18:0c:f1:7f:21:
cb:f7:dc:af:27:6f:8b:ae:d0:23:98:f5:ed:9d:a1:e1:fa:2b:
0e:ab:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:33 2025 by rpki-client