Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: ope5M/jAR7WP+OhPkRzVI0+v4R6tLOYcUgpFmcxXqio=
Subject key identifier: 69:FE:21:46:E2:57:7E:D3:92:1F:0B:1A:E2:9A:0C:F5:1E:69:51:2D
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0198A04CDBAAFA5F660DCDDD297C8E555B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0D64
Signing time: Tue 12 Aug 2025 22:00:48 +0000
Manifest this update: Tue 12 Aug 2025 22:00:48 +0000
Manifest next update: Wed 13 Aug 2025 22:00:48 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: JLNfpEApwjG3+Ssa91QPkcITtYzMbexqMtmI+Ni1pjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:db:aa:fa:5f:66:0d:cd:dd:29:7c:8e:55:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Aug 12 22:00:48 2025 GMT
Not After : Aug 13 22:00:48 2025 GMT
Subject: CN=69fe2146e2577ed3921f0b1ae29a0cf51e69512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:a9:59:a2:46:09:72:de:38:ab:6a:ba:9b:
a7:c0:4e:b3:01:85:49:79:9f:f5:28:19:3a:88:36:
21:45:d6:25:2c:20:12:c7:95:3c:a5:6c:96:06:60:
e9:e0:82:55:7e:74:c3:a3:52:c3:9b:16:18:35:a4:
0d:7a:e7:6b:e0:8b:0e:0d:e6:fd:43:cd:ff:0b:8f:
86:a4:d4:9a:57:91:ad:bc:62:84:2e:97:a8:d3:a1:
3c:62:10:53:d6:3e:e8:0f:a3:b7:a4:62:6c:7d:63:
ba:4c:3b:1e:64:f7:c8:22:99:3c:1a:82:a6:2d:3b:
df:5e:33:b3:24:6d:9c:ab:58:dc:4b:d5:2f:d6:e6:
ab:ae:6d:28:ec:ce:9d:6c:35:8b:9f:5a:42:d7:ab:
23:8f:fc:a8:fe:eb:6e:74:0f:c8:cd:13:3c:f5:fb:
b7:ad:1c:ec:22:fd:af:40:8d:48:51:a5:1b:bc:08:
b7:55:0e:57:54:80:bf:23:dd:1f:f0:e3:e1:35:82:
d7:5e:97:9f:f0:fe:6c:c7:86:06:4e:c4:d9:f2:61:
e7:b7:21:92:17:8e:8c:58:57:20:f4:a5:d1:e2:9d:
f9:bc:e0:fb:a6:63:0c:98:b1:97:20:44:72:7f:f1:
dc:09:18:50:17:65:f8:c7:5f:b4:45:80:84:3b:d5:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:21:46:E2:57:7E:D3:92:1F:0B:1A:E2:9A:0C:F5:1E:69:51:2D
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:70:eb:20:da:fc:2a:40:cb:41:76:38:90:97:5f:b4:9e:
f6:a7:0c:f2:d0:2c:61:48:b6:4e:a6:74:1c:f5:70:7f:1b:02:
a1:72:87:98:16:e4:dc:3f:57:46:d9:85:3e:f8:7e:30:59:28:
89:4f:03:a3:e7:bc:f2:39:90:ba:17:31:27:16:67:19:7e:cd:
50:4a:0c:40:09:94:d4:d0:aa:59:4f:84:86:dd:f0:74:8d:10:
cd:42:bf:d4:75:72:17:8c:80:d3:4a:2c:c2:b3:af:9a:11:a4:
ee:c2:9e:b7:9f:05:71:4a:35:ca:db:95:a4:2d:8d:7b:fd:bf:
63:77:ae:2a:ce:a5:d4:a5:0d:7e:ca:6e:94:f3:a9:33:65:4c:
b2:5f:52:52:82:bb:8e:67:af:65:dc:84:8b:87:2c:0f:29:dc:
97:b5:89:5c:e7:49:f3:73:1e:59:2f:7a:dc:23:ac:dc:ff:e4:
97:ee:a3:bc:96:ec:c8:74:9f:a8:6a:af:1a:2e:12:2c:f5:82:
1c:65:33:fc:4e:5d:02:71:6f:00:f5:80:ed:e6:37:0c:f7:39:
eb:ac:f3:53:4b:a8:21:e8:36:cd:99:a9:fc:38:c6:de:fa:66:
52:a4:e0:b9:d5:ac:59:99:52:d2:0e:18:a0:d8:b0:17:9e:57:
48:7b:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:00 2025 by rpki-client