Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: SdabznFmyLWPc3HDiRFARDpttxK/bBUft+0yhdeIdCM=
Subject key identifier: 87:A4:43:04:FC:A2:FD:A0:65:25:87:08:11:13:CD:35:EF:9E:3A:B0
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 01989592D0221FD4D66D9B326AE5FD4BF7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 20:01:23 +0000
Manifest this update: Sun 10 Aug 2025 20:01:23 +0000
Manifest next update: Mon 11 Aug 2025 20:01:23 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: FX2S0v/sClcEoHxa1oL1y43GrWYljmnX5YXMqqF/0kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:d0:22:1f:d4:d6:6d:9b:32:6a:e5:fd:4b:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Aug 10 20:01:23 2025 GMT
Not After : Aug 11 20:01:23 2025 GMT
Subject: CN=87a44304fca2fda0652587081113cd35ef9e3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:7c:e8:95:fb:82:50:2b:f1:76:86:c8:3a:
65:20:60:3c:9c:e1:aa:14:1b:71:cb:a8:a6:68:d9:
ae:7e:fa:3d:e7:83:1b:e6:0b:96:44:7f:3b:90:64:
d7:3b:16:75:14:f7:ea:49:b8:a9:79:80:3c:21:8a:
9f:04:e0:43:90:30:7a:a0:b7:fa:db:7f:0c:e1:3d:
2c:f2:73:e5:16:d2:0b:32:6d:64:e4:16:9a:04:76:
dd:fe:d1:6c:3a:ce:f2:b0:db:95:eb:d2:7a:da:cc:
53:8f:aa:92:37:c1:36:24:bd:91:2a:4f:eb:c7:10:
24:9a:03:60:35:a5:11:bc:23:f5:96:c8:64:e8:f1:
b5:fd:de:dc:2f:da:73:f0:da:db:0a:25:0b:26:ab:
dd:a9:17:52:92:a4:86:00:48:7a:45:44:0e:5d:09:
33:57:87:26:e7:8c:12:de:da:01:0b:91:06:a5:f1:
51:cc:a7:dc:07:77:fa:73:e3:f1:fa:4d:ae:e0:1d:
34:fe:eb:9b:37:25:d0:b0:37:ca:fd:10:42:c5:21:
93:73:a2:00:43:b1:1e:32:02:b9:11:2e:cc:a6:09:
29:76:99:28:10:e6:05:d6:ef:c5:86:a9:53:ca:44:
45:42:3d:c5:ce:0a:c2:b6:1e:7a:e3:87:4c:04:b9:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:43:04:FC:A2:FD:A0:65:25:87:08:11:13:CD:35:EF:9E:3A:B0
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:82:fa:33:94:b3:8b:01:21:31:03:00:7e:8a:0d:f2:4d:
e7:f1:1f:8d:82:66:78:b3:4e:e6:a2:34:ea:d6:1c:8a:67:c9:
7c:be:94:e3:33:ab:8c:39:7e:3b:7b:f6:fc:29:e4:e5:db:d3:
27:c5:1e:0b:0e:de:99:6a:98:f7:7c:d1:dd:8e:05:d5:f5:7d:
c6:29:d7:cc:a1:05:4a:e1:b1:51:f3:5c:09:cb:e3:de:7f:4a:
8e:47:96:3a:5c:0f:87:02:65:c7:f7:a9:b0:28:d3:62:4e:6f:
f4:16:f4:12:d2:65:37:18:96:41:7b:73:83:06:b7:38:d0:be:
3d:35:77:53:c3:9e:00:73:7c:d7:3f:5c:c5:77:59:e2:70:64:
9f:fe:e9:ea:37:9a:42:e6:95:dd:22:29:24:2a:28:91:9e:ac:
31:47:ec:6a:19:25:64:d6:2a:8e:27:d4:7a:39:9f:71:ab:d4:
ce:7e:08:c0:ab:2f:09:7e:02:57:d3:20:2f:18:d3:df:35:46:
35:77:11:f2:85:59:0a:ca:a3:58:77:01:a2:90:38:86:b3:16:
ec:f8:3e:9f:01:e8:f0:3e:64:e1:e6:9b:43:5e:d0:cf:94:d1:
de:a6:14:5f:13:3e:bc:0f:37:95:af:68:3a:24:23:ed:f8:a7:
a0:d1:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:23:04 2025 by rpki-client