Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier: 5Rx7vW9K8/i0kfrghftrm/Fo872h1gWKYGEWU4eqhaQ=
Subject key identifier: 85:E2:66:4B:CB:FB:70:E6:4C:10:74:C0:49:6D:E4:03:27:22:00:E0
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 0198895792B352DDA49A54BE3F8DD03F674D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 11:01:14 +0000
Manifest this update: Fri 08 Aug 2025 11:01:14 +0000
Manifest next update: Sat 09 Aug 2025 11:01:14 +0000
Files and hashes: 1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: vjI6yCVG5DtaDcJ5CHsCvr8i/i/O+uibimoX7kr1Vs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:92:b3:52:dd:a4:9a:54:be:3f:8d:d0:3f:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Aug 8 11:01:14 2025 GMT
Not After : Aug 9 11:01:14 2025 GMT
Subject: CN=85e2664bcbfb70e64c1074c0496de403272200e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:ef:2b:bc:48:39:85:4a:5d:ec:60:6f:e4:
1f:6b:0b:e5:2f:72:79:b1:2a:9f:0f:a0:ff:ee:11:
15:ca:27:c0:dd:17:c7:c4:78:f4:f9:e0:ca:70:7c:
23:07:4e:80:8a:a0:bb:da:2c:32:84:da:57:ba:f1:
21:9e:93:c2:75:a4:5d:51:7f:18:6d:2a:63:7f:1f:
b0:f8:f0:49:2d:34:88:a9:ac:38:0b:04:c9:29:7b:
48:7e:86:39:29:9a:41:36:86:81:45:59:87:af:ab:
2a:d1:18:66:16:15:59:5e:fe:0c:88:cc:06:75:34:
6b:0b:99:b3:1c:98:8e:51:09:a1:ae:68:8c:6b:aa:
51:12:03:b2:78:12:96:69:7d:05:d3:79:dd:34:12:
4b:ba:1d:6d:ee:86:81:99:1f:1a:fd:6a:85:5b:19:
69:96:01:36:e4:10:13:4e:58:54:e5:7a:52:f0:fb:
3a:af:35:a9:5f:ec:1e:cf:34:30:c6:58:d1:d1:ac:
8d:21:ae:b9:91:9c:12:45:86:75:94:85:da:50:17:
00:ff:83:15:cb:85:fb:97:fd:d8:c9:e7:0f:2f:d2:
85:ae:fc:83:52:12:d5:df:ba:00:62:73:25:2c:60:
bf:ff:53:a3:40:18:48:c8:87:30:62:65:f6:82:f0:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:66:4B:CB:FB:70:E6:4C:10:74:C0:49:6D:E4:03:27:22:00:E0
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:f0:64:05:6a:37:a9:59:2e:dd:b5:46:65:c6:cc:79:f4:
32:a5:db:49:e3:b9:6b:6a:a2:f3:57:45:51:8c:20:f4:e4:a6:
2a:4a:fb:a1:69:40:ef:f4:f0:6c:4b:30:12:a2:9f:da:8c:bf:
1d:47:aa:58:9b:49:61:ba:c2:16:40:6c:5e:7c:00:cf:61:5e:
54:bc:9a:b3:a2:d7:76:35:24:0f:96:de:9b:58:a8:9e:aa:fe:
8d:c0:e4:11:a2:52:3d:b4:76:72:5b:e4:11:de:89:ef:4f:c7:
bf:34:af:09:cc:ff:51:53:d0:50:00:e7:b6:a2:cd:28:5b:4a:
d0:b7:9e:ac:6f:a5:92:68:ff:3c:ec:0d:99:5f:33:80:9b:2f:
e6:ae:09:d1:70:47:8d:96:03:d9:a5:0f:42:b1:62:d2:00:c5:
62:52:ce:a2:3b:ed:3f:5c:42:86:83:96:35:97:0c:06:58:22:
cd:83:70:eb:df:1d:2a:0b:58:ad:d5:23:17:f3:d2:62:dd:0d:
94:98:60:21:39:fc:56:7a:0a:2e:5c:a2:be:69:11:ef:51:b3:
e3:40:6c:87:9b:06:a9:28:1e:34:92:0f:d6:cb:11:6d:95:6e:
61:6a:5d:e0:df:e8:64:bf:7b:a2:9d:27:a4:79:e5:3a:3a:06:
4f:e7:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:08 2025 by rpki-client