Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: 1S3Mgp1xX9+XB6xXi6SSe7subRrcwqjvCac7pxiH5S4=
Subject key identifier: 27:6E:23:C7:33:58:CF:82:62:A4:39:7D:08:85:6F:F2:32:BE:36:DA
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01987E65B677A55FCACEB21CC87D2F89FD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 15AE
Signing time: Wed 06 Aug 2025 08:00:51 +0000
Manifest this update: Wed 06 Aug 2025 08:00:51 +0000
Manifest next update: Thu 07 Aug 2025 08:00:51 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: 33vdQC5ushdr/WxAuatE1KwcvJ/mT1BFXtiQfZb7Mx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:b6:77:a5:5f:ca:ce:b2:1c:c8:7d:2f:89:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Aug 6 08:00:51 2025 GMT
Not After : Aug 7 08:00:51 2025 GMT
Subject: CN=276e23c73358cf8262a4397d08856ff232be36da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:1e:30:e4:77:15:77:00:83:4a:f1:7c:77:
78:34:73:68:63:09:9c:40:90:9e:b4:ca:05:b1:43:
1e:ac:e6:20:21:e1:60:77:2b:ca:4c:35:b3:20:96:
71:7d:33:7f:20:54:e5:08:b9:30:5d:74:65:b0:ae:
46:cf:6c:09:c5:c7:53:62:ae:99:ef:27:15:ef:7d:
27:51:d8:98:35:fb:1c:0f:f4:6b:9a:d8:19:ef:8a:
2c:a8:d6:33:4e:93:e1:bc:13:9a:df:c1:57:2f:ff:
5c:6e:3e:e1:32:f3:a8:ff:d2:92:7d:3b:1e:eb:a4:
2f:50:7f:87:da:d7:8e:df:72:ac:99:52:33:3a:2d:
07:e7:56:1c:35:a9:0e:50:ee:2b:99:f9:cd:a3:62:
3c:df:dd:2b:b7:bf:8d:18:2f:35:9e:04:7c:cc:9c:
af:4b:19:76:c5:7b:51:47:95:bd:26:6f:23:69:8a:
3c:a8:8c:39:ad:1c:20:76:2e:6e:8a:9e:cb:fb:be:
0c:66:43:65:cd:b7:4e:af:c1:64:c2:87:7e:01:72:
d8:f7:73:4d:71:17:ed:b2:6c:ad:ab:12:99:5f:1d:
9b:2f:d8:38:be:1a:48:eb:11:31:2d:51:85:15:ec:
72:c2:c0:e9:8f:9f:ca:0a:8e:64:0b:3d:e4:e5:a7:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:23:C7:33:58:CF:82:62:A4:39:7D:08:85:6F:F2:32:BE:36:DA
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:9a:e2:e9:dc:0d:5e:03:40:b7:a4:cd:da:85:9a:5c:19:
ef:45:90:96:47:1b:24:51:bb:1b:e6:a7:1f:b1:71:6d:ba:42:
b4:b2:f2:64:2f:5d:79:17:fb:43:98:47:d4:67:28:7e:c7:57:
ca:42:c7:94:8b:1e:eb:74:17:b7:20:58:28:c9:4b:4a:6d:f9:
e0:6d:00:2d:20:78:72:38:0b:ab:c7:5d:c0:9c:b5:c3:f8:56:
6d:71:32:b3:17:95:5f:dc:63:72:0b:a5:b1:70:96:77:3e:8c:
df:ce:b1:17:11:0b:a4:79:3a:bd:53:86:ad:87:b5:41:df:21:
69:38:fc:3c:0d:e1:78:fd:a5:fd:50:ab:b4:b1:4d:81:ad:0a:
20:a1:84:d4:72:f8:d3:ae:e9:d4:70:48:4a:09:31:e3:de:4f:
40:56:57:21:3b:9b:1d:dd:d1:2a:12:d2:b8:21:6a:8c:10:8f:
7e:0f:55:09:30:1e:5a:2e:6a:09:ec:c9:8e:54:f9:67:6e:8d:
c4:41:56:51:33:d2:40:85:fe:77:ed:ae:46:92:8b:00:36:be:
41:e8:b3:14:f7:99:23:d2:ab:b8:50:c5:42:a3:0c:11:9c:1a:
f3:ef:14:fa:8b:01:c4:19:7d:a5:e9:bf:52:b6:a3:74:57:aa:
d5:e4:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:01 2025 by rpki-client