Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: HIWr9cqpUMEyqKwvdrxlmXCZakYsFnaqSkAl5qdE8as=
Subject key identifier: 25:E7:7D:AB:90:81:85:E0:45:C2:A0:43:D9:72:34:F9:A5:EC:3F:92
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 01987908BCBD8640D5A3AE808BAE04DE9E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 05AC
Signing time: Tue 05 Aug 2025 07:01:12 +0000
Manifest this update: Tue 05 Aug 2025 07:01:12 +0000
Manifest next update: Wed 06 Aug 2025 07:01:12 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: DiUtZ0LNLFc8SFahhsE+7OtVO9Rjp9ZzkWqqwHbVkUg=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:bc:bd:86:40:d5:a3:ae:80:8b:ae:04:de:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Aug 5 07:01:12 2025 GMT
Not After : Aug 6 07:01:12 2025 GMT
Subject: CN=25e77dab908185e045c2a043d97234f9a5ec3f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:43:03:f8:71:7e:f3:36:19:04:ac:20:67:
92:75:68:fe:dd:b9:20:d0:1b:fb:ed:f4:ec:e5:9b:
dc:5e:e2:06:28:d2:64:4d:61:7b:0a:45:41:4e:d1:
2a:27:ae:83:0d:03:b8:ee:d9:e9:8f:7e:52:2c:e1:
f1:a2:9c:6d:7b:71:a8:c8:4e:2d:e4:68:d7:fa:c3:
b4:04:76:46:9e:8f:e3:c0:35:b8:9c:51:16:b3:85:
b0:a7:52:14:88:26:3c:6c:f6:d4:e6:90:cb:66:33:
52:c8:6b:6a:50:de:92:5c:be:c4:e0:f2:70:f9:e3:
ae:a8:3a:58:40:8a:98:7c:f4:fa:8f:bb:e1:97:19:
28:8b:7c:04:e6:a4:bf:78:c8:f4:86:ef:69:00:d5:
f2:9b:38:15:91:50:e7:21:63:ab:fd:c4:16:ba:c0:
55:cd:1c:9f:ad:f6:63:9e:32:ed:02:38:ae:7b:0b:
b7:5e:b0:e4:91:3e:bc:bf:32:ad:c7:b2:02:52:d5:
01:29:a5:94:87:b0:e5:a4:e9:e9:26:b1:8c:e2:20:
59:1e:5e:da:5d:0a:54:d6:6c:78:b3:a4:96:97:85:
52:ac:16:f4:1f:74:a6:21:ca:e3:7a:a9:1d:ce:d9:
02:9f:c1:f9:b6:c6:cf:85:39:03:ad:b5:cd:73:d8:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:7D:AB:90:81:85:E0:45:C2:A0:43:D9:72:34:F9:A5:EC:3F:92
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:09:c4:a9:67:e6:18:c1:2c:cc:0b:85:19:c1:e2:5f:3b:
23:d4:67:b0:38:b2:18:f2:90:90:ed:ec:28:70:fc:e9:16:dc:
e1:0f:ae:a3:27:de:62:d5:78:a9:12:76:5a:7a:17:88:ed:fc:
27:25:61:96:8a:f2:4f:d9:89:b4:80:8e:61:6f:67:3a:7b:11:
8e:6f:16:57:ab:7f:d5:e2:e5:57:2b:66:cd:6f:1c:f6:da:ac:
ed:65:fa:1a:13:d5:f4:a4:03:51:7d:88:e1:ba:5f:d9:e6:db:
c2:87:f5:80:58:b2:7f:4d:54:e1:41:6e:a9:0e:fe:62:cb:a8:
ca:5c:bb:f9:47:36:54:00:71:02:a1:0b:a1:bc:39:ba:38:af:
93:e9:73:5a:e6:9e:c5:12:03:24:a7:37:78:1a:b2:ed:50:7c:
57:3e:43:4d:c8:8a:39:3a:83:f4:8b:38:32:3b:70:c5:74:c4:
90:5c:1d:14:c7:82:8b:8a:09:9c:43:b0:6b:53:15:31:92:72:
f6:32:f2:6f:fd:13:f7:f0:01:92:a8:95:31:40:cb:ef:1f:3e:
f0:18:ec:24:44:e5:cf:87:44:7b:a7:c2:94:5d:19:70:8d:14:
15:cb:c5:5a:90:c7:2f:90:0b:ea:86:fa:b5:55:69:a8:80:ba:
2a:4d:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:16 2025 by rpki-client