Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: zHufFbNV5zz/RrTHa/ZOtdpPIzmKVv9iEOR7GTztzY4=
Subject key identifier: CF:7A:39:C1:BD:0C:9C:E5:3B:D8:43:C1:DC:80:E2:98:3C:ED:A2:60
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 01987DF833894BB0F662A5AB06DE311B88B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 0A48
Signing time: Wed 06 Aug 2025 06:01:14 +0000
Manifest this update: Wed 06 Aug 2025 06:01:14 +0000
Manifest next update: Thu 07 Aug 2025 06:01:14 +0000
Files and hashes: 1: R2wMoqdkLDHB1BCsXc7koujD71w.roa (hash: FmALC+nsf+pUttlOP2g4qVc5yZKYgI7dAbntzXZ0Nqk=)
2: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: xbBU5Umksva+w3kaDiLQQfNwiCvK0HQthQK09nYx0J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:33:89:4b:b0:f6:62:a5:ab:06:de:31:1b:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Aug 6 06:01:14 2025 GMT
Not After : Aug 7 06:01:14 2025 GMT
Subject: CN=cf7a39c1bd0c9ce53bd843c1dc80e2983ceda260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:29:ff:95:7f:85:12:6e:73:0f:85:f5:13:
0b:3c:d2:6c:5f:5e:60:4c:68:d8:76:c3:dc:34:15:
f4:3f:12:fc:b1:b6:cb:9b:e4:84:07:89:2d:1f:cf:
27:b2:13:b8:5a:e6:fe:e0:97:2b:e4:07:ec:b7:16:
90:23:af:ad:11:eb:91:2a:29:43:97:10:7f:be:1f:
74:1c:72:8d:95:ee:de:6a:d2:23:0a:89:1e:c4:0c:
c4:c0:22:38:be:be:34:89:ec:c7:6d:e4:f5:17:8f:
76:90:73:51:23:34:46:1d:e5:5c:cf:14:12:26:35:
30:dd:4a:ca:54:a8:19:2f:08:d7:a2:e7:29:cd:0d:
9c:8a:04:4e:a6:32:23:6e:3f:6c:6b:11:79:3e:bf:
7a:1f:23:f8:a9:32:9f:b1:fc:84:4f:04:0a:b7:b7:
ca:54:ea:42:ad:f5:1b:2a:14:bc:60:62:f4:1a:b3:
2c:56:9d:5c:f5:7c:87:c3:df:8e:f5:80:1a:86:45:
f6:49:cc:2d:49:bd:fd:4d:54:68:b7:3f:87:6f:0b:
7f:81:bb:fb:5e:c1:df:aa:40:72:72:7f:ad:6a:22:
55:75:ec:31:4d:4b:62:2d:30:d4:c8:97:f4:21:24:
87:dd:bc:6d:d1:cf:14:63:7f:16:65:a5:b6:2c:d6:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:39:C1:BD:0C:9C:E5:3B:D8:43:C1:DC:80:E2:98:3C:ED:A2:60
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e3:aa:33:c4:58:bc:fa:a2:85:50:3e:9b:76:d5:07:25:07:
e0:77:e7:9b:10:c8:81:3e:f1:c2:34:c2:98:d2:69:47:a5:38:
fd:7b:16:64:66:af:c3:cd:88:51:f0:f0:91:86:4b:33:36:74:
55:90:35:a0:42:4e:d4:f2:2a:38:fa:08:c3:89:6f:e9:0a:07:
e0:16:5f:d5:f7:30:47:43:af:9d:ad:a6:7e:72:6e:1a:54:8d:
7f:91:88:32:0b:bd:28:18:74:be:47:02:fa:51:71:2c:3f:fd:
cc:1a:a4:fa:a0:e1:3e:50:72:77:6a:83:87:f4:b5:77:8e:ff:
99:18:3f:5b:d0:31:d5:f5:c1:04:e4:10:b4:f7:ff:36:59:e7:
68:22:0d:6a:64:78:88:21:d0:0a:32:15:32:e9:fa:94:66:66:
ce:56:65:83:f8:4e:03:19:cc:c5:7b:ce:95:20:b6:19:c6:3b:
0a:c8:78:0f:b6:dc:2e:6a:81:e2:7a:b0:df:07:7a:70:c4:1e:
4c:a9:10:07:6f:06:56:48:d1:4d:c2:be:47:93:8d:eb:f8:04:
4f:61:64:b2:e5:43:3f:74:d0:46:2a:e0:77:7e:cf:60:b8:84:
e8:6c:26:a5:8f:28:15:56:64:e0:2e:9f:c0:36:2e:d7:9e:1b:
04:42:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:22 2025 by rpki-client