Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: Af4hLxxijE416A/Z2EZtXlyX1xAEnNmBe1Zj1I6HzvU=
Subject key identifier: 5F:3E:57:BA:95:FE:59:2C:3F:E7:DB:60:73:CC:E8:D7:78:4A:57:54
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 019873E3C7D1B5A6DACEEB7D08449A7345AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 0E17
Signing time: Mon 04 Aug 2025 07:02:44 +0000
Manifest this update: Mon 04 Aug 2025 07:02:44 +0000
Manifest next update: Tue 05 Aug 2025 07:02:44 +0000
Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: spyZXT0EZsGXHrF1zwkJb+ZJ9S4jiY0N/ZpMbpCBZm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c7:d1:b5:a6:da:ce:eb:7d:08:44:9a:73:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Aug 4 07:02:44 2025 GMT
Not After : Aug 5 07:02:44 2025 GMT
Subject: CN=5f3e57ba95fe592c3fe7db6073cce8d7784a5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:b6:68:17:a3:64:39:06:2f:ee:15:df:20:
50:e4:f1:2a:12:6b:54:d6:39:e7:66:a5:c0:4b:a5:
7c:67:4b:55:a3:2f:62:57:fa:e2:eb:a7:5a:40:fa:
9a:4d:4b:07:34:29:17:31:68:c9:1d:50:d3:1e:9e:
86:b6:27:7b:f0:e3:b1:87:ce:3e:1a:3b:f6:48:7d:
b2:d3:e1:b6:6f:ce:10:3a:29:d1:65:67:ea:b3:bb:
33:5f:ab:fe:b3:ff:33:6c:bf:7c:a4:2b:25:c8:c8:
15:61:c6:73:b8:dd:3b:e5:bd:ba:25:59:45:3f:67:
0a:7d:70:10:66:63:b1:d2:c0:57:1c:dc:06:8f:ea:
15:0f:1b:d6:cd:12:45:a6:76:da:69:85:f1:0e:81:
24:35:d3:99:21:e1:38:d6:ab:9f:8e:05:ad:80:8d:
de:fe:8e:09:90:2a:b8:d6:b4:17:87:63:26:91:5d:
27:ab:02:ec:9b:54:4b:20:65:5c:45:5e:f6:9a:b0:
ec:5f:2b:52:80:5c:01:89:83:8f:c0:b4:ea:20:08:
da:bb:7a:e2:26:be:e5:9f:9c:64:33:f6:17:4e:a8:
64:17:cf:a5:76:48:be:c4:a0:53:12:79:03:14:5a:
17:ed:0b:28:d6:53:7a:af:9d:5c:54:57:18:b2:ad:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:57:BA:95:FE:59:2C:3F:E7:DB:60:73:CC:E8:D7:78:4A:57:54
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:63:0e:47:e4:58:49:5c:97:95:58:95:49:68:cc:6a:08:9b:
66:90:dd:15:30:90:47:83:4c:a6:bb:2a:33:d0:c6:22:bb:11:
b9:21:cf:98:f8:6c:b3:26:cc:9b:65:23:09:18:3a:f8:f2:84:
c4:04:d0:e2:23:a1:ac:12:67:85:16:7f:62:b7:27:50:f9:69:
2d:7c:88:5d:eb:77:ab:a2:24:75:a4:b7:31:72:bd:99:df:f7:
24:5e:56:bd:7f:7e:ea:30:e8:82:40:1f:6c:92:ea:31:bd:c6:
ba:db:2a:33:2e:0a:a1:31:04:13:d5:3d:33:4d:b1:af:c1:19:
14:61:d0:f5:ab:2d:8d:ba:bf:da:97:b4:54:9c:36:7d:cc:a3:
0c:c4:58:ad:dd:08:31:07:44:5c:1b:93:4b:4b:99:46:84:58:
da:b7:97:08:a8:73:4b:97:e7:a3:2c:47:7c:42:16:3a:7c:f1:
90:08:72:73:38:36:cf:fb:ad:76:ab:e5:ce:e4:26:cd:57:b1:
b8:7f:eb:ae:39:2c:79:7f:f4:62:13:8a:81:5c:f1:53:45:c6:
a0:fe:aa:f0:dd:6b:67:6f:8b:d5:cb:a2:13:a7:e6:91:19:91:
e1:9c:68:ff:3f:fb:dd:7b:e8:15:da:fe:7d:d9:0b:05:3e:58:
9f:6c:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:45 2025 by rpki-client