Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: BGnSZDpFCGFrxUzHYIN7ZL1I6jgHsd4WrOrSirCAvCM=
Subject key identifier: 26:61:ED:46:FA:22:3A:F9:8C:30:39:6D:1F:91:29:6D:11:74:3D:A0
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019872CFA4EE1AFA31B5EE0E05426F0A0EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 0123
Signing time: Mon 04 Aug 2025 02:01:07 +0000
Manifest this update: Mon 04 Aug 2025 02:01:07 +0000
Manifest next update: Tue 05 Aug 2025 02:01:07 +0000
Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=)
2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: P0Fwcgmtq0hQLarjy3TSPoLazDKQ63ZFoqrUmEqnTZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a4:ee:1a:fa:31:b5:ee:0e:05:42:6f:0a:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Aug 4 02:01:07 2025 GMT
Not After : Aug 5 02:01:07 2025 GMT
Subject: CN=2661ed46fa223af98c30396d1f91296d11743da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:3e:3b:09:65:0b:c6:d5:e9:f8:00:e0:a4:
89:ba:b4:43:1c:97:f1:16:9e:db:52:ba:6a:20:3d:
82:3f:e8:ae:31:72:45:8f:7c:f8:0c:a4:bb:20:a2:
72:cb:fd:87:56:e7:3d:45:11:fa:4c:e6:51:9e:bd:
80:74:1c:61:e4:52:db:d0:04:69:e9:fe:53:b7:1a:
d2:c1:10:b7:e6:3d:24:b9:2c:5b:77:02:9a:88:87:
e7:07:c0:02:4e:ab:84:f0:18:2d:8c:e6:cf:67:f6:
00:25:d3:20:8d:cb:62:30:1c:0c:99:5f:96:7b:34:
2b:72:8e:ce:15:42:9e:1d:b1:69:97:e6:1d:af:34:
b3:4f:01:7a:68:96:ec:bd:5a:17:f1:4b:bc:e6:ec:
91:82:82:5c:97:a2:7b:51:4f:40:0f:e5:c3:64:c2:
96:2a:15:ef:06:ab:ef:d7:4d:d3:67:e7:e6:35:c9:
f8:90:34:93:69:e3:ce:04:8e:84:37:82:ba:50:63:
d1:24:35:4c:2e:bd:1f:d2:83:4a:89:6e:24:92:68:
f6:a2:59:ff:3d:2b:55:00:cc:a9:52:b0:2e:01:aa:
b0:e2:ce:36:fb:79:a2:61:0f:6c:7b:3a:2d:c0:bd:
1b:a2:de:56:1b:4c:fc:a6:17:03:ac:ef:5a:21:0d:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:61:ED:46:FA:22:3A:F9:8C:30:39:6D:1F:91:29:6D:11:74:3D:A0
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:9f:1a:dd:86:17:a5:10:4c:22:7e:52:ae:ac:3a:15:92:
b4:43:81:53:80:2c:3a:75:f2:2f:39:19:c8:ca:84:f8:85:01:
60:4f:7d:dc:c0:8c:61:58:31:1e:8e:49:9f:04:57:34:9f:82:
44:8b:07:89:b9:d1:dd:ff:c0:ec:43:bd:6a:8d:47:9a:07:e4:
69:5e:be:9c:97:2d:7b:0f:77:2f:95:78:f3:12:b2:58:fb:c6:
8d:2b:70:cb:1d:ea:6a:15:27:25:e9:e8:55:89:31:c6:d1:24:
ec:ae:92:55:fa:3b:ca:99:83:79:47:5e:b3:69:d3:81:14:c5:
4f:ab:91:0c:f7:ab:c4:8e:d5:df:8c:7b:64:f3:57:0d:25:60:
85:90:49:eb:5a:13:36:b2:a8:66:ec:d3:6d:1d:dc:4f:fd:6d:
37:01:0d:46:a6:79:cb:d9:b0:00:13:02:c9:c4:e8:55:d4:12:
5a:58:7f:4b:71:44:1f:50:08:f2:8a:99:4e:db:9e:33:a8:94:
76:70:b6:dc:1a:8b:5e:14:6d:c4:ab:58:a9:88:38:4b:7e:7b:
29:84:ba:41:61:89:5f:79:d4:28:b8:c6:f9:58:7c:cc:f0:fc:
7c:6e:fe:47:28:8f:1d:f3:d0:a4:70:45:05:f8:76:64:2b:da:
6b:95:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:39 2025 by rpki-client