Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: JK24TBrIJmM8U9aJ8jvzJ6wYt82XLbzi9r6tcuODc08=
Subject key identifier: A7:4C:7F:2A:D4:FC:28:AA:C9:53:99:17:4E:F6:00:51:C1:F0:29:49
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 01987D8BD0811D6DDCC6B169F29E34AAFBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 15C9
Signing time: Wed 06 Aug 2025 04:02:51 +0000
Manifest this update: Wed 06 Aug 2025 04:02:51 +0000
Manifest next update: Thu 07 Aug 2025 04:02:51 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: jP6cXRQIHr+P974HItDNdxUeV5d7rm/SWTUfKHE1faA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:d0:81:1d:6d:dc:c6:b1:69:f2:9e:34:aa:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Aug 6 04:02:51 2025 GMT
Not After : Aug 7 04:02:51 2025 GMT
Subject: CN=a74c7f2ad4fc28aac95399174ef60051c1f02949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:48:e8:42:c0:6c:1a:42:4b:54:29:d2:dc:
1d:07:6b:21:16:5d:24:12:89:64:6a:76:88:44:8b:
76:38:8f:a8:39:35:83:a4:7e:27:54:f5:67:0a:fd:
49:85:b6:f8:70:25:d3:83:ea:e2:cf:8d:cd:dd:6e:
bd:61:1e:77:7d:b9:ff:ea:b0:07:da:0e:93:05:53:
07:6d:01:a6:9b:db:16:3f:63:64:92:30:20:68:a5:
ac:ea:2e:46:5c:e1:32:4e:ab:98:2f:9f:25:d3:1b:
d4:90:29:47:72:06:0f:e5:06:34:fb:40:89:37:05:
49:95:91:35:94:b2:89:bf:8e:13:c1:3f:8d:c4:a3:
53:12:24:57:6b:9f:a4:f7:f5:16:ae:e4:41:f2:d9:
d7:a6:91:f6:83:a3:7f:29:07:64:75:5f:8d:f5:5c:
c3:ba:9b:13:c9:8d:2d:d2:dd:14:6c:ab:52:06:b2:
c5:f9:17:2d:2e:65:50:a1:9d:31:c8:ba:a8:23:49:
1e:9b:99:a8:ca:4f:b5:80:57:d5:16:7c:44:e8:5a:
70:d8:e3:7d:67:75:c5:3a:16:22:dd:90:c5:50:f7:
59:1d:50:94:b8:53:0e:51:b8:0b:f1:6a:7c:d0:e7:
b4:6d:21:2b:7c:46:0d:42:e6:d2:d6:8e:86:bc:42:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:7F:2A:D4:FC:28:AA:C9:53:99:17:4E:F6:00:51:C1:F0:29:49
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:8d:97:2a:44:02:1f:96:15:49:f3:6f:e0:00:e2:e2:8c:
01:40:30:3c:5f:d2:e1:cb:d1:1e:81:83:fd:ef:d9:c6:ad:5a:
dc:78:74:3a:79:e6:3b:ad:57:37:b7:43:c1:12:99:ed:0b:45:
04:9d:39:a0:a2:cb:cf:c6:02:63:a3:d7:a1:e0:08:c4:f1:b0:
bc:f3:4d:6a:46:90:c8:d7:a1:a7:b7:a6:43:dc:1a:3e:01:05:
4f:5e:69:69:e4:0a:cf:93:89:08:b9:cb:c2:b0:8c:e0:e6:f5:
be:a3:55:90:0d:26:3e:30:f2:22:5c:9d:06:90:31:1e:a9:f3:
8f:5a:9e:ba:3f:2d:e4:99:1d:02:a1:91:82:9c:aa:ca:db:ab:
b7:2a:ea:13:09:c7:49:f8:1b:5c:b7:3d:d3:fa:ba:5b:87:1b:
dc:50:eb:87:e3:59:9e:36:21:35:c2:63:12:67:53:35:38:75:
b8:a0:22:56:c1:94:78:39:34:89:49:a7:43:c2:87:d6:57:a7:
b7:8f:58:d0:28:e4:e5:3f:b7:4c:64:fb:65:09:35:de:89:cd:
fa:69:76:df:08:18:60:be:87:ba:fd:36:d4:46:60:cc:83:e1:
6a:8e:86:5d:3f:cf:a1:4f:ac:0b:57:61:91:12:79:73:48:1f:
ff:39:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:43 2025 by rpki-client