Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: svxlEGouczW326pZYkq2HQPBr+X5wYCQNmGBVz+4qEI=
Subject key identifier: 29:BB:2A:0F:DB:A3:36:6A:EE:31:C0:16:0F:69:0A:63:10:49:94:10
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 0198906BCB8E403681C7C20201C238E32DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0E7B
Signing time: Sat 09 Aug 2025 20:00:40 +0000
Manifest this update: Sat 09 Aug 2025 20:00:40 +0000
Manifest next update: Sun 10 Aug 2025 20:00:40 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: OePnIPWxTddLa5z10Vx6HNkuFWW6yrf51FFDXP545HU=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:cb:8e:40:36:81:c7:c2:02:01:c2:38:e3:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Aug 9 20:00:40 2025 GMT
Not After : Aug 10 20:00:40 2025 GMT
Subject: CN=29bb2a0fdba3366aee31c0160f690a6310499410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:7e:58:88:3c:57:0f:08:c1:ab:57:64:dc:
fd:6a:15:c1:23:1a:5e:14:a9:24:d6:3f:4c:fe:e3:
ec:c4:be:fa:c5:55:0c:d1:2b:ce:56:46:f3:2e:f5:
3c:31:45:1d:62:ab:a1:0d:12:6b:a4:d7:07:dd:86:
ad:a6:e9:1c:bb:af:26:01:99:3d:16:22:09:53:45:
26:66:f3:df:94:93:24:be:18:21:9a:3a:ab:08:50:
ba:bf:c1:fb:ab:c2:5c:35:88:cb:c7:1d:b3:06:cd:
55:bc:70:c9:2c:3d:75:58:3b:10:12:cd:bb:5c:b2:
3b:bf:6c:fe:ae:bf:42:7d:bd:09:d3:4f:79:80:7f:
06:09:11:c8:70:2d:4a:c0:f9:0f:62:ce:8c:a1:a8:
8d:37:a9:44:e2:1e:7c:af:be:ee:22:76:80:b7:fb:
16:8c:75:69:42:b9:87:a1:00:2e:39:f0:a9:03:ac:
26:a0:50:0f:b1:72:18:ac:ad:bd:a4:84:66:ff:c5:
f5:b3:a0:75:1c:fd:c2:52:e6:c3:e8:91:65:c7:35:
23:34:6c:5a:30:93:f9:2e:72:bb:b9:ce:d6:87:77:
70:46:2c:53:51:d8:5c:28:2b:79:1a:a4:b2:c9:e7:
37:7f:8d:38:fe:cc:5f:3c:36:6a:b9:30:fc:81:84:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:2A:0F:DB:A3:36:6A:EE:31:C0:16:0F:69:0A:63:10:49:94:10
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:49:be:2e:83:9c:36:e7:21:17:06:57:88:44:20:b2:b1:
db:3d:80:33:a4:c3:ad:cb:be:14:20:e8:74:88:bd:5d:42:a2:
04:f2:dd:f7:db:16:59:e3:49:a2:44:53:8e:07:2f:6d:a9:3f:
6b:b4:da:0f:ac:3f:60:a5:f7:80:51:3e:c1:07:cb:33:39:cb:
41:41:27:10:32:56:cb:30:0f:e4:b8:9f:c6:da:96:7e:3a:65:
bb:23:ae:67:9c:3b:9a:d3:b6:ec:35:f4:d4:31:6f:63:29:dd:
72:98:11:82:b6:1d:83:11:d7:ef:f2:23:12:06:f4:91:63:34:
b0:9b:de:15:e0:10:b6:46:f1:d1:ab:57:28:d1:b7:71:fb:b2:
8a:89:37:fe:73:0a:72:b6:10:43:af:32:6d:55:47:33:94:05:
94:21:47:ac:63:73:6a:59:cb:76:19:c0:1e:49:88:31:42:e5:
95:a5:e9:e0:27:46:4f:27:f5:12:b0:ca:fb:cd:30:15:09:b2:
3e:5b:20:94:48:f3:16:38:ff:4c:80:3a:d7:ec:ac:48:2f:db:
f7:ec:f6:74:b3:ad:e7:f9:8f:45:4d:fd:7c:ed:91:ed:ad:0f:
21:62:f2:ad:1a:21:d0:a8:32:1d:c0:47:6b:04:7a:5e:f9:4b:
d5:01:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:05 2025 by rpki-client