Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: AXq8MNW+1EJlrf2WGvWguYD4oQzRwKNaleqEl4UMrJw=
Subject key identifier: E2:88:7B:DD:60:97:21:1D:17:73:76:FB:7F:71:BD:4D:65:C3:BE:47
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 01987C401C4DF54214717149AD3F55AA01B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0E11
Signing time: Tue 05 Aug 2025 22:00:32 +0000
Manifest this update: Tue 05 Aug 2025 22:00:32 +0000
Manifest next update: Wed 06 Aug 2025 22:00:32 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: EfOvWovw9RM1bFnAdt9k9IP5/vb9cAma3XZhJrSol8E=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:1c:4d:f5:42:14:71:71:49:ad:3f:55:aa:01:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Aug 5 22:00:32 2025 GMT
Not After : Aug 6 22:00:32 2025 GMT
Subject: CN=e2887bdd6097211d177376fb7f71bd4d65c3be47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:d7:ef:e5:69:bd:96:6c:d3:5c:8b:31:fc:
59:e8:b9:c0:e1:d5:5e:38:b4:73:fb:d2:a2:69:48:
2a:99:08:b5:18:9e:ce:f5:e4:25:aa:b0:1b:d1:a4:
b6:06:f5:06:f2:5c:7a:30:23:7e:1f:59:29:6b:0e:
63:45:12:31:f3:fd:36:d6:af:14:89:68:79:a2:e3:
45:e2:0c:4b:4d:30:f6:cd:14:64:96:fc:ad:0f:de:
8c:19:47:52:09:5c:b8:d1:de:c4:56:6a:ed:7c:37:
60:8c:72:c5:c6:d2:5e:27:8e:09:19:ac:bd:ab:d0:
eb:02:33:43:e2:42:da:42:5d:6e:4c:80:a7:cf:15:
7d:d4:1a:d9:8c:64:a0:ab:7f:16:08:27:8a:45:58:
a0:c9:12:30:b4:d5:fa:db:45:16:6b:c0:43:a4:3d:
a2:0a:d0:ca:49:9c:78:60:86:ef:3a:5a:72:98:a1:
b1:c6:f2:83:a5:aa:9f:09:2b:c5:fd:49:a9:77:e4:
81:e5:d4:ab:ff:2c:c7:09:04:07:46:59:a1:3b:c0:
02:78:87:3a:e5:ab:7d:db:97:32:a2:80:09:4e:76:
7c:bb:bc:c4:86:4f:9b:52:fa:d8:dd:d9:67:cb:84:
07:5c:8f:ec:b3:2d:d7:16:19:ad:59:4f:b3:fd:92:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:7B:DD:60:97:21:1D:17:73:76:FB:7F:71:BD:4D:65:C3:BE:47
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:64:89:76:71:bf:43:78:36:e2:25:33:b1:39:a6:97:d1:
40:1b:f0:00:d5:12:70:91:2c:c5:a4:91:f2:c8:d5:91:ad:f7:
5e:2b:93:f0:94:4b:c0:d2:32:44:18:aa:79:91:a8:b0:a6:24:
b3:01:3e:63:be:65:b3:83:dd:97:1f:78:bf:b0:15:95:57:b9:
1d:7f:22:b5:79:62:fc:00:ad:94:af:42:df:f2:72:9f:a4:24:
fe:60:86:0e:90:8d:84:62:e0:dc:9c:65:75:77:45:df:78:17:
59:92:82:65:d1:3a:df:dd:a0:95:78:bf:8f:dc:e3:d0:ad:16:
6d:20:3e:1d:f1:34:df:f4:1d:22:97:92:dc:8a:88:2c:a7:2b:
9d:a3:08:b4:85:dc:40:b5:6b:25:38:7e:d5:ad:f7:91:b7:89:
ea:96:d8:46:24:96:f1:77:10:46:10:19:49:a6:93:d3:e8:e9:
f1:8e:b0:67:40:de:e6:39:07:7e:68:6e:b5:26:63:01:e1:cd:
ee:44:49:e7:07:4b:65:ae:33:5b:86:3d:4a:f4:2e:d2:14:97:
28:8d:58:e7:e8:ad:f2:b4:b8:24:f3:11:e8:fd:ec:03:41:56:
82:c2:c5:b7:f5:f7:28:10:be:86:89:eb:b2:bb:d0:d1:0b:e7:
dd:cb:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:51 2025 by rpki-client