Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier: 8DIIxjRdd8k+y2AtJMe/v0pgsJxVvJ8CRn3wvjG47IU=
Subject key identifier: 9A:C2:51:98:D9:96:F9:A5:31:4E:D2:01:7D:88:58:FE:BB:C8:40:9A
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial: 019873E31BB03F1D23AB4EB5DBD7D5A8506F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number: 0507
Signing time: Mon 04 Aug 2025 07:02:00 +0000
Manifest this update: Mon 04 Aug 2025 07:02:00 +0000
Manifest next update: Tue 05 Aug 2025 07:02:00 +0000
Files and hashes: 1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: uQyZ1eLdQ9r9QLY3ENPBjiJQSZqPzOoZxKBbO13MPFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1b:b0:3f:1d:23:ab:4e:b5:db:d7:d5:a8:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
Validity
Not Before: Aug 4 07:02:00 2025 GMT
Not After : Aug 5 07:02:00 2025 GMT
Subject: CN=9ac25198d996f9a5314ed2017d8858febbc8409a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:19:50:de:44:11:23:3e:9f:34:70:ea:08:
06:29:da:ef:29:16:72:11:e3:e1:4a:0e:a3:9d:61:
2e:3d:8b:f3:19:af:7f:71:88:21:ed:08:a7:5e:12:
c0:55:af:26:e0:28:41:df:00:32:6f:ec:57:b3:cb:
3f:e4:84:e9:ba:3e:0d:c3:85:1c:c2:1f:cb:b0:6c:
4e:33:fa:70:73:07:04:5b:f1:79:df:7d:fc:4a:05:
f2:6b:3e:87:57:26:0e:15:45:70:69:34:c1:f6:c6:
a7:fe:7f:2d:8d:68:4c:6f:4a:fa:df:57:c5:17:de:
45:df:b4:57:d8:f2:e7:9c:28:af:a2:6e:49:1a:ce:
c4:c1:7c:42:dd:04:13:59:20:a0:3f:84:4c:f8:5a:
40:38:5d:6e:e7:30:a7:4d:2b:3f:6c:b1:e9:b7:aa:
f0:be:60:68:44:72:de:5f:df:8b:56:bf:f1:93:f7:
46:95:da:4a:b9:e4:86:49:e2:e0:ac:f1:e8:a9:51:
75:70:2a:02:8c:ae:0b:fb:3e:13:b9:b9:c0:92:7a:
a7:57:1f:1b:49:75:87:61:28:b5:29:5f:a3:3f:1e:
1e:fc:92:d4:2c:a8:2f:5e:d8:0b:17:79:d0:a4:43:
63:e5:48:e4:6c:e8:32:33:1d:4b:a4:18:12:fb:27:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:51:98:D9:96:F9:A5:31:4E:D2:01:7D:88:58:FE:BB:C8:40:9A
X509v3 Authority Key Identifier:
keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:59:82:96:a5:04:4f:f4:85:2d:30:4f:59:54:aa:97:8b:
39:c7:8f:18:ec:a6:54:0d:79:57:03:ca:72:8b:b3:4c:d4:e4:
ea:f4:8e:11:15:1c:be:02:c7:02:12:5e:74:67:a0:46:72:2d:
46:a2:c6:03:ef:b8:25:12:f8:57:7f:19:3d:99:5d:e9:40:07:
60:f0:4f:b0:76:fc:4d:94:16:86:37:66:a0:73:17:c8:c6:03:
3d:1e:07:f2:47:69:03:42:5d:a7:00:73:60:59:84:15:5a:e8:
77:f8:25:89:6b:dd:23:cf:d4:2d:52:d4:29:ec:72:fc:59:a7:
7f:d9:c1:e7:93:3b:91:a0:c0:a2:83:e7:f1:40:04:d5:57:a8:
aa:8d:bf:2a:81:96:2b:78:7a:14:5a:92:ac:b2:e8:da:96:68:
3c:d8:24:2a:67:18:99:85:be:73:4a:04:d1:c8:de:72:ec:06:
fd:fb:d6:bb:42:c1:e1:a1:16:66:de:a1:3e:28:fc:3f:32:1e:
e4:d9:23:f9:9e:d7:c5:22:dd:5e:a6:1b:9d:cf:22:09:3c:96:
02:cd:cc:e0:ed:40:7a:7a:99:df:e0:29:7a:ed:85:05:ff:3d:
33:b3:94:75:0b:ce:99:f1:42:83:33:ab:f6:51:9e:70:cf:e0:
a7:e3:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:35 2025 by rpki-client