Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: CnxbhQBN490qpa4jvBq9xkfsmducIkQxNOHAdhnzaLM=
Subject key identifier: 68:E1:25:F3:C2:6B:C9:53:9E:B7:3A:55:C7:05:A8:AC:07:85:85:BF
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 019877513A9B7EB574DD78E2BA98169214D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0D00
Signing time: Mon 04 Aug 2025 23:01:08 +0000
Manifest this update: Mon 04 Aug 2025 23:01:08 +0000
Manifest next update: Tue 05 Aug 2025 23:01:08 +0000
Files and hashes: 1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: 2BLv1OOA/4gmZ7XDL4wNEWDVLmvYdH+a2MscwVxz9UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:51:3a:9b:7e:b5:74:dd:78:e2:ba:98:16:92:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Aug 4 23:01:08 2025 GMT
Not After : Aug 5 23:01:08 2025 GMT
Subject: CN=68e125f3c26bc9539eb73a55c705a8ac078585bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:cf:70:cd:06:1e:79:18:97:6f:80:38:70:
18:a8:c4:8f:c6:9d:62:b4:34:71:0f:82:20:01:01:
52:f6:75:7d:5e:54:38:ca:a0:cc:37:4a:7b:65:6a:
74:15:cf:68:6d:45:51:65:4f:ad:3d:5e:14:4c:04:
fa:b4:5a:82:95:25:d3:d6:99:ef:d8:5c:f5:b2:27:
f8:b4:6c:66:9d:0c:37:36:9d:0f:45:4e:f2:56:79:
99:1f:84:9e:82:3b:71:bf:2f:18:2c:c7:bb:04:97:
10:3a:d4:6e:e3:ae:26:8e:5a:a8:00:1d:80:4a:86:
0d:3d:2e:c4:99:0a:7e:e9:10:c0:56:dc:a4:f5:f6:
e7:d9:e9:f1:16:21:ef:25:ec:35:d1:58:9d:39:88:
a7:7c:c8:b3:1d:0f:0a:bc:d7:68:70:19:f8:09:d6:
b1:a4:6a:ea:2f:15:39:b9:bc:79:75:d2:b4:74:20:
44:f0:5c:10:8b:f0:8a:52:fb:df:1f:65:6c:0d:ab:
6a:9d:e2:6f:d2:6a:71:85:56:a4:b0:91:6d:2a:dd:
5c:18:c6:6e:43:7b:c8:6a:d6:4a:47:79:9d:48:34:
6a:22:b4:8b:6f:23:bb:cd:d2:8d:0f:35:53:34:55:
5f:60:a7:c6:a3:27:13:40:6d:08:5c:3e:d4:75:44:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:25:F3:C2:6B:C9:53:9E:B7:3A:55:C7:05:A8:AC:07:85:85:BF
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5f:2f:eb:1e:9a:5a:b2:5d:f7:2e:7a:97:99:ce:8e:72:fa:
af:da:6a:e7:5d:6f:56:5a:6a:bf:95:98:91:ab:2a:08:b5:14:
89:19:e8:57:75:81:16:b0:14:38:91:8d:c6:c5:b8:7b:1e:03:
ec:7b:96:95:b6:de:09:0f:13:7a:87:09:68:13:a7:07:4c:96:
82:58:6a:ce:f9:b7:b8:c4:a8:ea:3e:75:96:cb:0b:f3:d3:89:
ae:a1:96:4d:e7:95:c5:87:2e:cc:db:0c:66:65:16:94:84:84:
f0:0c:36:af:27:bd:f2:07:77:0b:7c:2f:15:99:ba:53:53:8f:
94:7a:57:fb:a4:df:8e:cd:98:d0:5e:5b:1c:8a:c9:11:da:75:
a6:17:3a:57:e8:74:c3:7c:21:fe:f9:21:fb:b6:3e:d8:c5:8a:
ea:24:47:6b:b9:fd:de:bc:a4:3f:36:19:ce:e0:27:d0:49:05:
2d:64:9d:bf:e2:66:d2:20:5d:cc:d0:2f:e6:bc:d5:83:98:ff:
59:b6:b4:56:d4:ec:42:3b:33:7b:54:4c:bf:ea:3b:23:a2:ee:
b5:e4:23:36:62:da:cc:57:d2:93:5f:92:05:16:1b:8c:84:e7:
e2:ee:5f:da:b2:3f:5f:f1:19:b3:37:a2:e0:0d:67:b8:b1:60:
29:4e:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:31 2025 by rpki-client