Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: 3CHOsIOnZgwBOAYGCREoqafvFSPxa2XxKTgTjPWXQA0=
Subject key identifier: 0F:50:C2:CA:63:6A:50:6B:9E:91:5B:DF:E5:8D:76:41:B9:0B:12:40
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 0198846835BC008675A37BF265499404065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0880
Signing time: Thu 07 Aug 2025 12:01:18 +0000
Manifest this update: Thu 07 Aug 2025 12:01:18 +0000
Manifest next update: Fri 08 Aug 2025 12:01:18 +0000
Files and hashes: 1: WLPv_kiHkV3foWtvEt3ca8XVjG4.roa (hash: 485f4Pk93SekykKHn/Aq62sR6+/AvJghjHie2NYKlhI=)
2: hcpelkMB3HLp2KFjx3F4u7p7QiA.roa (hash: 61+3xEVQzTEIYSViuJWqNAx3iaX+tJlcGs9MEnOKcRg=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: YE4GBRaFXAKSSVYlr7PHMktzpULutMmiJkGSk71M7G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:68:35:bc:00:86:75:a3:7b:f2:65:49:94:04:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Aug 7 12:01:18 2025 GMT
Not After : Aug 8 12:01:18 2025 GMT
Subject: CN=0f50c2ca636a506b9e915bdfe58d7641b90b1240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:35:e4:41:7a:a1:43:17:41:4d:da:f4:3d:
ee:cf:f2:45:63:08:8d:1a:03:d5:5f:c1:0a:35:95:
1f:df:d1:06:71:de:de:af:8a:74:de:05:d3:fe:e0:
a7:05:c2:fd:8b:92:28:99:9d:63:43:8b:63:e9:67:
dd:80:03:f0:96:fc:f5:39:ed:17:a3:62:5e:2d:3f:
d1:64:22:24:48:23:b3:c5:c5:05:85:e5:0b:43:4b:
a6:4e:76:01:6c:c2:2f:3b:bb:c5:72:68:4f:8a:2b:
e4:00:f5:4a:04:18:d9:2c:6e:18:04:77:15:d9:08:
6d:4f:d8:ae:07:01:0c:86:6d:52:31:d3:93:e1:28:
a0:ca:25:1a:aa:74:6b:72:fd:eb:08:c6:a7:e8:6c:
5f:12:16:44:89:9a:8d:96:54:c1:63:27:08:65:1a:
bf:88:89:e4:14:52:26:fc:17:27:e2:ba:36:99:52:
d3:78:d9:29:41:a0:8b:b5:cd:46:68:7d:d4:2f:6c:
4d:21:e0:4a:b7:29:d6:0e:15:89:47:15:a0:15:a4:
0e:f7:62:a3:a4:f4:c5:75:7d:05:c6:38:61:6d:be:
e3:c7:e2:8b:dc:9f:ff:93:54:ee:8e:8a:2d:36:a1:
42:be:49:91:63:35:6e:5b:e5:fd:bf:6d:29:ec:02:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:50:C2:CA:63:6A:50:6B:9E:91:5B:DF:E5:8D:76:41:B9:0B:12:40
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:44:fc:e9:33:fb:3c:34:d3:9d:ba:a7:24:9f:31:ca:82:3b:
83:13:c5:15:dd:37:7f:d7:57:66:49:ee:fd:39:3d:1e:4b:6b:
37:c9:0c:56:17:2a:1b:d4:13:17:aa:08:9c:ee:fa:3c:c8:f3:
7f:0e:4d:01:ad:6a:14:2d:6c:9d:20:eb:e2:16:1f:31:d1:2c:
63:7b:40:b2:a4:e0:8b:31:40:f5:12:2b:1a:3b:e5:e2:ae:42:
d7:c2:07:9e:c0:7b:4f:01:2f:65:e9:2b:dc:02:bd:d4:c1:5f:
13:fa:47:1e:60:22:dd:8e:06:8c:b7:30:76:48:cc:48:41:73:
59:7e:7e:f8:8a:d1:4d:ea:c8:d2:2d:c7:6f:8f:f3:07:34:90:
e8:4a:80:8e:a9:94:08:3a:ac:4e:48:2b:80:ff:5e:50:4b:4c:
88:d4:2d:54:f3:66:36:18:ea:72:00:fb:5c:2a:5f:16:6b:8c:
a5:44:77:61:7a:44:09:8a:c2:7a:81:3c:bd:a0:04:39:0d:4f:
af:f1:c4:9e:26:7e:79:9a:3b:5b:62:74:47:25:dc:90:51:b6:
07:ba:0b:8f:3d:a5:bc:4e:b5:1c:6c:c2:9a:0e:ee:b3:75:c2:
60:b7:75:6b:fc:66:36:a7:2b:03:06:44:57:b3:8e:d2:2c:a7:
c8:5d:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:03 2025 by rpki-client