Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: M/oIv0W+fGTOdad9+JLcrPVA5QGSgv9ELthuh8aMkXU=
Subject key identifier: 25:3B:3A:3B:42:E7:63:71:C4:1D:8E:4A:B3:75:EB:DA:38:4C:FE:8C
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 01988D33EF220246DCCDBCBC3DACA15CB498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0F28
Signing time: Sat 09 Aug 2025 05:00:47 +0000
Manifest this update: Sat 09 Aug 2025 05:00:47 +0000
Manifest next update: Sun 10 Aug 2025 05:00:47 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: BHDul8JfuJjjcbMTr8nRTJN/4Vs02sTwmAEY2q6WfUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:ef:22:02:46:dc:cd:bc:bc:3d:ac:a1:5c:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Aug 9 05:00:47 2025 GMT
Not After : Aug 10 05:00:47 2025 GMT
Subject: CN=253b3a3b42e76371c41d8e4ab375ebda384cfe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:b8:bc:0b:94:2c:5e:61:aa:d0:75:dd:02:
d0:1a:be:b1:07:e1:8d:26:49:eb:12:1f:d6:86:92:
93:22:28:70:1e:f6:30:82:35:c3:c4:66:17:e8:63:
41:2d:d9:61:8c:e0:2e:82:f5:9f:1f:9b:b4:b2:4d:
20:ff:d8:d0:2d:fb:d5:a7:85:b4:80:d9:9b:64:f3:
80:aa:f1:c5:78:1c:59:17:ad:73:8f:82:f4:5b:ca:
91:29:1f:e5:f0:b3:c6:e6:e0:5f:41:61:f2:6f:cb:
3d:13:25:14:07:a1:32:d4:86:da:bd:16:58:65:c4:
77:8f:e9:8e:3b:0a:bf:af:4c:72:4f:5b:db:57:06:
23:2a:0b:9e:2d:bc:a9:5f:2f:45:85:14:6c:b0:68:
5b:b1:e1:9a:34:5b:6a:0b:f9:f8:38:2c:e0:33:6b:
87:91:db:4c:93:c8:1e:80:90:62:fc:3c:3f:b6:13:
f5:00:9d:f5:23:f4:53:7a:6d:81:94:47:95:d4:e1:
af:67:e6:5c:b1:e9:ce:80:d9:3b:ad:56:f7:37:4b:
45:56:32:ab:9a:af:1a:0e:0f:1b:43:38:cd:58:13:
da:e4:18:f3:fe:0d:17:b8:0e:f5:07:c5:e3:74:0d:
d0:dc:37:23:64:2a:6d:25:00:ee:55:e2:8a:7d:70:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:3A:3B:42:E7:63:71:C4:1D:8E:4A:B3:75:EB:DA:38:4C:FE:8C
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:1f:f1:1a:98:83:5f:4e:24:69:ba:a3:d0:9f:71:40:a9:
7c:85:9c:aa:f5:a3:f9:4c:9d:69:24:8b:48:ff:b6:3f:df:ee:
b2:9c:7a:23:87:ca:1a:41:c5:11:6d:16:7d:04:73:ef:b4:9c:
64:ea:6e:70:10:9c:4d:94:da:9c:a3:c1:ac:0f:6d:53:15:d0:
c0:da:95:b6:3d:a9:23:89:eb:ba:63:51:ab:a9:35:be:af:8b:
bf:dd:9e:db:27:2c:21:b0:59:a1:af:d4:05:b0:88:ae:a2:7c:
c9:eb:ea:1a:96:84:d1:c8:ce:86:ac:52:52:6d:a6:43:67:1c:
3b:e5:e2:52:81:03:e0:bb:5b:6d:18:90:52:92:76:8b:2d:dd:
a2:e6:d4:bc:4b:7a:9f:34:69:dd:bf:bb:73:85:d4:0a:70:cb:
8d:ec:e8:26:d9:57:6b:32:14:31:ee:ff:dd:57:95:42:22:ad:
17:28:ed:47:b1:84:23:7c:96:53:a7:c9:35:f3:38:17:4f:74:
9b:bf:e5:00:16:b0:e3:d2:51:23:b5:74:28:75:29:94:b4:e1:
9a:da:75:65:a3:b7:bf:8a:98:0f:f1:1e:3d:f7:e9:9e:14:ca:
3a:ca:f4:15:ab:63:69:80:ec:2b:ba:67:2e:b7:cb:44:ec:ea:
06:72:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:23 2025 by rpki-client