Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: oY67cjjAsj2oHmaWCSmzKoAgglY+GVehygakxVwweIs=
Subject key identifier: C1:51:0A:5C:EF:BB:A7:07:C7:EE:35:63:81:FE:25:2B:9C:CD:A7:18
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0198936CE15A5DE6D96FA97F4D5CA2A467A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 10:00:43 +0000
Manifest this update: Sun 10 Aug 2025 10:00:43 +0000
Manifest next update: Mon 11 Aug 2025 10:00:43 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: 9zY9JOs71Z7QeQfnVcRUeJGx5VWuwx8AIq2hbATwmlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:e1:5a:5d:e6:d9:6f:a9:7f:4d:5c:a2:a4:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Aug 10 10:00:43 2025 GMT
Not After : Aug 11 10:00:43 2025 GMT
Subject: CN=c1510a5cefbba707c7ee356381fe252b9ccda718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:14:ad:73:4a:9b:cd:1f:95:03:66:ce:7f:
e3:2d:ec:4c:53:a5:52:ed:96:26:11:b2:4d:74:9b:
7e:cb:2c:ad:3d:b3:9e:b5:89:e7:ba:0d:55:b2:ac:
11:6b:3d:4d:00:b8:fd:21:9a:08:70:cc:0f:b6:16:
52:57:e8:63:b4:b3:67:c7:3c:90:d7:fd:9e:12:5d:
8f:48:37:f3:e4:8b:b9:e5:b7:30:a4:96:d2:f1:2a:
50:88:ed:e4:d6:b6:d8:f7:54:27:f4:2b:8e:1f:df:
3c:cb:4e:5b:4e:cf:fe:12:d9:0d:68:5d:e4:f2:d0:
60:b9:7e:48:5f:e3:3d:74:a2:3b:e0:4a:92:c7:37:
3a:bf:a7:f0:b1:1c:cc:c0:65:21:22:af:d5:6d:a5:
4f:2f:0e:2c:65:8f:67:95:47:c6:ec:58:9f:46:13:
cb:5e:3a:f9:fb:d2:08:e2:78:d9:7b:f9:ec:1d:e3:
a6:e2:84:41:78:22:f6:be:06:c3:27:69:c1:26:cb:
46:fe:b6:cd:23:c5:3c:dd:0a:2e:bb:33:18:0c:71:
e3:f7:87:6d:7b:87:0b:9c:72:25:a9:11:44:06:1f:
dd:0c:41:e0:e6:34:ae:1e:6e:77:1e:a9:4d:65:99:
c9:49:09:d6:8f:96:18:ae:10:76:fa:c6:5e:55:3b:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:0A:5C:EF:BB:A7:07:C7:EE:35:63:81:FE:25:2B:9C:CD:A7:18
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5d:d1:ae:bf:1c:90:f4:0d:a3:60:5c:e5:4f:44:b5:48:af:
03:78:bd:01:91:f5:bc:aa:6d:78:b0:0b:48:a8:0f:7c:2d:7c:
c4:be:14:4a:13:b0:a5:ec:48:d1:99:c0:01:b8:f3:b2:53:99:
0d:15:cb:7d:1a:72:01:9f:33:42:4e:7d:50:e8:b2:c6:68:68:
02:b2:a9:77:d8:2e:35:1a:4e:1e:c8:78:80:c0:21:95:b2:5f:
42:d6:28:a0:18:d2:37:a6:9b:7c:80:8e:69:89:9e:39:5e:bc:
e7:ef:71:23:6a:ce:a6:13:d9:1a:12:8d:80:a7:b3:6a:6b:74:
54:d2:dd:3c:96:2a:f8:8a:0f:9e:c7:94:aa:26:89:58:a7:49:
93:e9:56:d3:1e:5a:c2:81:f5:32:62:db:d9:ae:d5:a4:45:4a:
ec:23:bc:6e:10:3c:d7:78:0d:21:0c:63:54:e6:77:1f:eb:0b:
f2:9b:9a:28:02:32:7d:a6:f2:bc:d2:23:dd:98:ac:c1:16:b6:
fd:78:7e:09:43:1d:97:86:8e:32:e5:42:3a:8a:93:dd:ad:bf:
40:3a:23:ce:3f:df:c8:1e:5f:96:6f:1d:9b:27:0e:62:7e:b8:
b7:ba:0a:39:80:ac:86:04:e5:81:b3:83:d9:da:73:5f:54:9c:
ac:6a:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:29 2025 by rpki-client