Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: TelYOwrD4j6zA9vzfgPd/2leHxbTgtp4roAwicIVghg=
Subject key identifier: 9A:AC:5C:39:EF:33:06:EC:18:65:B1:DF:0E:6C:2D:E0:A4:7F:B2:D7
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019896A6ED33E3CB23C7253DB8C904B1AD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 01:02:58 +0000
Manifest this update: Mon 11 Aug 2025 01:02:58 +0000
Manifest next update: Tue 12 Aug 2025 01:02:58 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: 0Wn1vsgmJAt5k3ZBV+YcF3JrSLOtPE6ib1Bagu5fVa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:ed:33:e3:cb:23:c7:25:3d:b8:c9:04:b1:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Aug 11 01:02:58 2025 GMT
Not After : Aug 12 01:02:58 2025 GMT
Subject: CN=9aac5c39ef3306ec1865b1df0e6c2de0a47fb2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:4b:89:f5:41:cf:62:65:01:c4:20:84:1c:
8b:26:eb:e8:8d:c5:89:71:13:4c:7c:d6:f6:36:90:
cf:af:9d:55:a9:25:05:dc:48:dc:0e:58:83:17:ad:
fe:af:d2:2f:e8:aa:6e:72:63:78:2d:73:9c:47:f4:
e3:a8:75:0d:20:f4:b3:e0:b3:85:48:11:ba:c3:e2:
bd:d0:01:a5:f5:9b:3f:ca:33:1f:c9:1d:30:43:82:
a5:b3:78:12:d4:3f:13:93:e8:69:a2:cc:58:79:9b:
0c:c8:5a:02:ff:1e:5f:b8:c9:1a:8c:c2:ca:bd:5a:
19:d9:b6:c2:ad:b8:6a:9b:9b:19:04:94:f4:24:3a:
8e:82:e8:53:e9:c9:27:11:5d:49:2b:8c:98:f5:14:
9d:4c:77:5d:7d:c0:fd:03:21:88:af:b7:52:b1:61:
08:87:c7:54:69:0d:18:bf:c1:f7:46:85:d2:b8:98:
0a:ec:a9:47:31:76:39:01:f0:7a:c5:aa:ae:63:d2:
ae:a7:1e:18:c3:65:61:54:8c:96:25:8f:1d:c7:f3:
8c:0d:01:32:55:d0:12:02:7d:22:f3:04:7b:13:1e:
a7:de:af:53:7d:9a:c1:b1:67:ee:05:ef:65:bf:bc:
30:a7:c8:dd:d2:99:49:4e:37:78:24:cf:26:76:0f:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:5C:39:EF:33:06:EC:18:65:B1:DF:0E:6C:2D:E0:A4:7F:B2:D7
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:03:ab:b4:99:96:b2:f4:a4:35:79:81:f8:cf:24:77:34:
44:68:54:b3:d9:84:c1:58:ff:59:cf:f0:00:9c:45:3d:99:39:
66:03:8b:a2:63:63:e2:53:b7:01:99:26:19:2e:ad:3a:1c:20:
a8:7c:da:4f:a0:f1:57:2c:7e:f8:0e:62:8b:46:88:fe:1f:8a:
19:eb:dc:4c:81:5c:a7:24:0e:5a:8f:3b:90:d4:3e:25:c4:3b:
8e:49:ac:b7:0c:5b:4c:72:68:cc:30:bd:59:a4:8c:1b:ba:86:
48:29:c2:35:d7:ee:66:e0:32:bb:53:b0:c2:7c:ee:db:fe:4a:
7d:11:a6:fd:16:8c:e0:db:31:19:b1:45:fd:41:dd:2d:eb:8e:
a5:84:d2:dd:2f:cb:a5:8a:da:a9:88:60:a9:35:f6:c7:e9:be:
6c:2d:86:e5:d4:f5:a3:e0:b6:aa:b3:2d:9e:3f:bd:b6:91:c8:
b3:45:6d:0d:1d:16:0b:81:14:93:b7:ff:29:d4:df:b2:63:3c:
07:a8:dd:bb:e4:3c:4e:67:e5:aa:8f:0d:9b:87:4d:d6:3f:33:
c7:fb:42:20:36:13:a6:dd:d1:c6:5b:60:3e:50:aa:2e:0d:c5:
9d:25:c7:6a:79:26:c6:cb:2a:58:47:eb:69:b3:56:e9:b3:9f:
81:e0:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:42 2025 by rpki-client