Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: BEnoTu8ukVLA0RIYxUbLOYf/WMSa6i+7He+qoDqmpYQ=
Subject key identifier: DF:9D:4C:39:E8:C6:67:ED:71:E8:02:F5:35:E1:15:1D:B0:E5:B6:DD
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0198838C8352EC6040CE5C7D89E19A1A611C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0FBA
Signing time: Thu 07 Aug 2025 08:01:20 +0000
Manifest this update: Thu 07 Aug 2025 08:01:20 +0000
Manifest next update: Fri 08 Aug 2025 08:01:20 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: YgSb84W0gBfvgFoLnX9/WO15QHbOvJo9f7PhlOBfRwA=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:83:52:ec:60:40:ce:5c:7d:89:e1:9a:1a:61:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Aug 7 08:01:20 2025 GMT
Not After : Aug 8 08:01:20 2025 GMT
Subject: CN=df9d4c39e8c667ed71e802f535e1151db0e5b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:8d:c3:a0:f8:8d:cb:b7:be:8d:76:8f:8b:
fd:91:7e:64:7e:74:21:2f:65:1d:75:4f:87:96:c9:
80:06:ae:bf:7a:72:90:b1:db:90:06:fd:9d:bb:ab:
b5:05:39:36:c3:ce:a6:3d:08:ad:12:f6:20:08:b5:
6b:46:d0:c4:25:e3:56:25:38:b1:f9:18:8b:f9:0f:
ba:ca:5f:37:a3:17:e5:3e:fc:94:68:7e:c0:7d:01:
18:23:f4:67:de:39:da:81:31:73:e9:58:8b:d2:6c:
97:ef:4a:2f:30:07:2b:fd:d9:80:f8:99:17:66:cf:
2e:b3:13:7c:42:55:83:95:57:0c:61:84:fe:20:73:
ad:85:ab:f9:49:83:34:d8:c2:b1:7a:cf:59:b0:a2:
8e:f0:62:b5:4f:ed:a9:06:a0:34:be:7a:a4:76:47:
7a:52:d2:66:48:90:a8:4a:7b:b5:90:25:b1:1c:7c:
22:14:bb:25:68:57:3d:b9:48:8e:01:a5:bd:de:3b:
1d:4b:41:6e:32:4d:50:76:28:1c:85:4b:67:62:1b:
b9:89:1a:3a:c4:b2:e7:de:d1:dd:c7:ca:ea:85:98:
3e:21:6d:1b:55:af:76:bd:ab:da:ea:cc:e1:da:eb:
aa:e5:5d:42:85:80:31:4b:f7:66:6e:dc:8c:80:31:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:4C:39:E8:C6:67:ED:71:E8:02:F5:35:E1:15:1D:B0:E5:B6:DD
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:93:ed:37:0e:5d:4f:fb:31:d0:84:20:51:be:c3:d9:64:d4:
8b:83:28:eb:2c:88:77:a7:e6:68:b7:70:fd:2f:dc:e6:39:3c:
c1:be:af:58:f6:f9:e9:67:e1:a9:38:b7:53:29:cb:26:9b:b6:
36:52:ca:5f:ca:4a:1b:cd:3f:27:7a:d5:06:c7:17:f7:0d:39:
43:3c:c7:e9:0f:22:4f:2e:86:4e:0d:03:a6:e9:b4:9d:60:25:
de:05:99:c8:4a:01:44:5d:3f:13:f3:46:00:4b:6d:fa:7d:c1:
31:c2:6f:27:e1:6e:6e:62:71:c7:af:c0:5e:25:0c:cd:54:87:
8f:bd:77:0c:3a:7c:89:f7:b4:f2:ae:78:a9:7c:a5:0f:20:33:
b5:f8:a5:9d:92:e5:5d:98:9f:45:ae:f0:74:cb:1f:6a:eb:de:
2b:32:56:7d:65:38:17:bb:94:2c:19:93:0c:25:12:af:53:8f:
02:74:4b:50:d7:c8:ea:f7:b5:3b:cf:1d:17:d6:b0:92:f3:d8:
be:a1:cd:33:d2:c0:75:9a:4f:96:7d:b1:b0:7f:b8:09:28:b3:
c6:58:8b:d9:7c:81:05:59:77:2e:af:c4:56:ab:8f:c0:1c:ad:
4f:51:3b:1b:00:f2:97:2b:3d:50:40:77:76:1c:94:6b:39:7f:
be:e2:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:52 2025 by rpki-client