Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: NT2VP9y4bEcuxIwcrfTaCIR7Sb/rtwVB8fGceKlsIZA=
Subject key identifier: A5:B7:34:8B:2A:EE:68:49:D0:12:33:AC:D8:DD:4C:A7:84:28:AC:38
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 01987D1C5F8DF29A0E9D2F281E641E1DB11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0827
Signing time: Wed 06 Aug 2025 02:01:08 +0000
Manifest this update: Wed 06 Aug 2025 02:01:08 +0000
Manifest next update: Thu 07 Aug 2025 02:01:08 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: 7jQ9MzPgJe4nd8nVqWh14jjbFwlak0L89O1BR5q0eWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:5f:8d:f2:9a:0e:9d:2f:28:1e:64:1e:1d:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Aug 6 02:01:08 2025 GMT
Not After : Aug 7 02:01:08 2025 GMT
Subject: CN=a5b7348b2aee6849d01233acd8dd4ca78428ac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:f8:ff:d4:59:ff:88:dc:18:91:7d:d6:9e:
15:93:5e:e8:ef:da:48:4c:4e:b6:f0:99:a2:4c:1b:
be:f6:80:c4:63:b5:77:26:57:2d:3c:b0:c8:e6:cc:
2a:8c:8a:19:38:d9:9d:35:c9:29:a2:84:b7:73:bc:
67:3b:9a:e3:0c:02:3f:70:8a:74:f8:a6:5f:61:62:
a6:9d:ec:ad:38:5a:c8:85:ca:de:5e:4c:3e:cc:06:
db:3c:26:52:f1:73:d6:35:b6:e9:54:79:e2:86:43:
a2:ca:48:c4:80:3c:52:5d:f8:92:37:2c:6e:ba:c3:
9b:0a:e9:6d:54:c5:99:26:cb:3d:fa:6e:6d:7d:09:
f0:d2:7f:de:12:06:be:e7:29:3c:3f:ac:10:6f:77:
98:4c:b6:26:d5:a6:60:0f:9a:98:17:b2:bb:87:f8:
db:59:88:c5:78:85:37:cb:01:ee:a7:ba:c0:cf:a2:
6f:6b:e3:6c:96:33:2e:cd:61:e3:bc:df:8e:df:3f:
8c:39:7b:64:87:93:98:3e:e5:7e:c4:24:bd:f5:37:
56:2d:d6:b2:9f:2d:b8:6b:4d:5d:0e:71:48:59:99:
5e:1e:2d:fa:46:a2:28:3b:e6:48:4d:c7:42:47:df:
16:81:a0:30:5a:39:1c:2f:8e:dd:e0:8b:57:17:6c:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:34:8B:2A:EE:68:49:D0:12:33:AC:D8:DD:4C:A7:84:28:AC:38
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bf:d7:3c:2d:90:50:b0:8d:f6:6e:91:e8:62:4e:27:92:e2:
1c:74:74:25:c7:03:82:25:0f:66:6a:67:36:38:44:9e:fc:6b:
84:40:cf:2e:1e:d0:39:11:72:07:09:41:d5:b5:8f:6c:04:05:
ec:79:24:ac:29:0a:1a:69:c4:c2:35:15:3f:ff:e7:4f:7a:4a:
9b:fe:1a:aa:e2:f4:ff:4e:7a:3a:7e:82:3e:9e:d1:bc:a0:30:
fe:1d:a6:2a:ef:a1:01:87:3f:b4:41:60:2f:33:d1:ac:58:76:
44:aa:fb:49:62:70:81:86:38:d4:98:8e:d1:52:e2:85:d9:0b:
d6:4b:5e:1b:a5:a6:65:83:1a:97:0e:62:33:46:30:9b:8c:fc:
49:ca:75:80:f1:3d:b0:e6:41:53:96:04:83:61:a6:43:b9:79:
10:05:78:82:63:db:39:7d:f0:0e:c9:7b:4c:1d:65:6c:a7:a1:
1d:e6:eb:c8:66:85:ca:5c:7e:77:9f:2a:82:69:a3:4b:45:82:
e6:e7:91:14:87:f6:db:73:69:d7:7f:40:32:bb:bd:6d:78:b8:
96:4a:62:00:51:e9:2a:63:9d:31:36:14:44:39:6d:f1:ef:51:
63:55:60:7e:a5:18:0f:ee:e0:bf:34:84:ee:43:6a:35:ba:e8:
a1:34:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:59 2025 by rpki-client