Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: U1M15dCO3F7RXu1OKjQgpUomHrnhR0OFDperPtqWS3E=
Subject key identifier: 03:4A:37:66:AA:7F:E4:85:29:6A:83:C6:68:A8:C6:2E:7D:B4:4A:3B
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0198819DEA9E38906E4EA51FCCF3BCD67D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 05F1
Signing time: Wed 06 Aug 2025 23:01:06 +0000
Manifest this update: Wed 06 Aug 2025 23:01:06 +0000
Manifest next update: Thu 07 Aug 2025 23:01:06 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: OtV6djsL40mKCXRO+3Hbj5eQcrwhFu4bcWFL9scwBPI=)
2: rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa (hash: 0BWjtnz0dvROb8BSYgsrsPvNfL11ilpff5syBRFzFkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:ea:9e:38:90:6e:4e:a5:1f:cc:f3:bc:d6:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Aug 6 23:01:06 2025 GMT
Not After : Aug 7 23:01:06 2025 GMT
Subject: CN=034a3766aa7fe485296a83c668a8c62e7db44a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:7a:ec:9c:23:25:db:ba:a0:75:6f:d4:92:
15:ab:b0:7f:68:cb:1f:e7:c7:bc:fe:e7:ec:6a:9d:
ed:fc:35:62:c9:60:0d:7e:f7:bd:2f:50:40:a2:4e:
59:33:2c:68:e2:37:87:d5:f1:2a:38:54:82:8f:50:
17:c7:b0:74:f9:78:46:61:76:82:f0:94:10:87:5b:
38:d3:a5:7a:48:e2:ec:e4:7d:1b:75:f5:45:4e:ee:
ad:31:bf:4a:27:a4:10:05:25:39:ab:51:b8:ef:bb:
4d:d0:1b:c7:27:85:eb:b2:b0:25:cd:c2:8f:52:2f:
b3:f0:3f:b7:14:3a:29:7c:db:41:5b:bd:47:3b:c3:
5b:c4:c7:e7:b3:7f:1e:95:14:2f:8e:c5:89:39:24:
a2:8c:cd:e5:02:3e:a7:7e:49:d0:8f:a6:bb:6f:01:
57:ce:3a:ea:13:57:fe:58:ac:d2:5b:ca:90:51:34:
33:5c:01:08:12:75:fa:ea:55:0c:3e:bc:61:55:c2:
d7:01:9b:c8:ce:1f:cd:a0:46:75:4f:43:4d:c9:32:
00:49:f6:0c:da:73:dc:f0:5d:e5:7e:9a:c3:c6:7f:
45:bd:35:5a:99:35:29:36:2d:69:46:23:c3:95:79:
5b:a6:8e:b6:e3:09:52:df:69:bd:bd:d3:d7:22:a6:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:37:66:AA:7F:E4:85:29:6A:83:C6:68:A8:C6:2E:7D:B4:4A:3B
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c3:24:45:39:cc:f1:50:60:49:a4:7f:c9:37:6c:c5:8b:35:
22:c2:0b:ac:dd:b2:46:1b:f4:7d:e9:ec:75:49:80:9c:8e:d3:
c4:fe:51:34:49:38:34:45:28:f0:b9:b2:05:22:d1:22:ec:62:
d0:c0:1f:79:54:e9:bb:35:ac:25:7d:aa:cb:e5:98:7f:c1:6d:
b4:04:9a:c5:55:95:cc:3f:6e:fa:20:e9:38:b5:7d:df:4f:f5:
d5:68:23:27:9d:c1:08:8d:64:83:65:f6:53:f1:90:d1:70:eb:
be:ae:80:df:ee:40:4e:ec:a3:af:bd:de:c7:be:1f:c7:f6:28:
33:d0:9b:43:a3:37:69:b6:d9:db:fa:74:e6:fa:9f:1f:f6:10:
1a:e1:63:dd:39:00:ca:23:58:6a:56:63:1f:19:46:f0:21:ff:
e7:b4:2f:22:40:a5:39:22:a2:cd:94:84:4d:78:d0:2f:4a:cd:
1a:ea:56:55:45:b7:4f:9c:ce:bb:5a:5d:cf:2f:f6:c1:56:6c:
c0:b0:c3:93:1a:a3:07:81:53:52:62:87:16:2a:87:e9:ce:bb:
b4:96:45:d4:d8:4e:14:b1:ef:d6:f4:f3:02:64:02:bf:b2:c1:
05:80:ce:88:06:3c:42:bb:a2:e0:a1:3c:4d:66:1b:57:2d:a2:
84:84:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:01 2025 by rpki-client