Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: dAL30PRg36MzNibBINkjT/TUCfDn3SDit/oBx/kCaiw=
Subject key identifier: 20:69:F6:48:8C:11:50:75:D7:19:69:84:17:58:29:F0:CF:02:E2:9E
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 01987AC006F43DAA5E279C8D17FD15D45B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 15:01:01 +0000
Manifest this update: Tue 05 Aug 2025 15:01:01 +0000
Manifest next update: Wed 06 Aug 2025 15:01:01 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: OdlzmjkxnT+FrDWR9YpBC9sxIf0M5T+uebPhHl9WqYo=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:06:f4:3d:aa:5e:27:9c:8d:17:fd:15:d4:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Aug 5 15:01:01 2025 GMT
Not After : Aug 6 15:01:01 2025 GMT
Subject: CN=2069f6488c115075d7196984175829f0cf02e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:cb:c1:4b:db:cd:a7:61:ee:5d:37:d9:0e:
65:98:d5:39:20:79:3e:bb:18:05:21:e7:52:bb:8c:
0f:47:e8:5d:7d:02:8f:55:0f:ed:4b:cf:ff:1b:c4:
80:d5:a5:75:2a:f9:6e:b3:1c:77:a7:05:c5:92:a0:
40:cb:47:02:b7:24:84:35:89:f3:6a:dd:51:b3:88:
89:83:02:db:97:84:c0:0e:67:58:6b:31:b2:18:3a:
3c:61:f7:ea:13:17:1b:d3:38:88:5d:96:7c:f0:14:
5b:a4:e3:22:e2:7f:6b:71:19:84:16:c1:8a:d3:22:
16:d5:c0:7e:66:18:93:33:7a:b8:a1:10:7e:7b:19:
ab:06:92:2b:72:95:67:42:59:08:c7:d8:c6:13:6d:
bd:5b:cf:2e:1b:3a:50:63:14:ea:bf:0c:94:19:a0:
d8:67:26:85:06:a0:98:38:6f:2b:e7:41:01:b5:fb:
99:75:d4:ca:63:69:dd:45:56:ba:c7:b0:e4:63:77:
76:3d:9c:84:7f:14:b9:f4:36:94:c3:1e:db:28:7b:
92:88:d6:11:dd:61:0a:eb:a2:68:e3:4d:73:5f:c1:
77:fa:90:ea:1c:85:e6:dd:73:c0:59:3c:39:84:99:
fa:fb:07:f8:cd:71:38:cc:18:44:91:dd:02:df:da:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:F6:48:8C:11:50:75:D7:19:69:84:17:58:29:F0:CF:02:E2:9E
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:b2:6f:6f:42:e0:80:20:93:e3:d4:55:ba:f6:6f:23:5c:
46:58:e2:01:54:42:ff:e7:2e:7f:10:b2:35:5e:36:27:99:f4:
fa:a5:ed:7a:65:21:c4:2a:c9:9f:ba:d7:c1:87:92:65:62:bd:
21:c3:b2:59:29:ee:89:67:42:6a:62:77:86:a0:6e:4c:f3:57:
59:78:2d:6d:84:f9:d2:96:d6:87:29:04:40:0a:c4:2b:a4:54:
19:ea:12:56:25:eb:1d:4c:04:7f:17:78:38:8c:da:23:4f:c6:
09:d0:a6:76:36:9c:7e:c5:59:0e:12:04:b8:fe:59:96:e2:41:
f0:76:6b:e6:bc:40:9d:00:8e:af:fd:90:9e:89:57:d6:7d:12:
f9:0f:7d:34:30:d2:52:a4:49:6a:6e:8c:ee:06:b6:47:c3:00:
8c:ed:47:dd:a6:3f:26:ca:c6:34:55:46:7c:1c:69:d9:d8:1b:
86:0a:d8:7c:40:91:8d:13:98:79:e2:47:8b:20:5f:15:9b:c4:
ed:fe:a9:e6:fc:6d:5d:0b:6a:b3:36:80:78:8f:ce:0a:db:61:
23:f8:fc:2b:21:86:5b:9a:c9:f4:a7:37:7d:b6:df:2f:07:78:
38:9e:14:0a:43:7d:e9:fe:27:4a:2b:57:24:af:a0:2d:b3:e1:
07:a5:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:49 2025 by rpki-client