Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: POMBqXv207A0VDhbtgY2i6s8v47WkNLsWFfHDNFHEds=
Subject key identifier: 51:A5:D6:B1:14:E5:48:97:00:DE:4E:D5:D3:B9:E0:9B:EB:C5:08:DD
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 01987B9D5B58339D03CCC3FFF9513CB9C3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:02:46 +0000
Manifest this update: Tue 05 Aug 2025 19:02:46 +0000
Manifest next update: Wed 06 Aug 2025 19:02:46 +0000
Files and hashes: 1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: 0/YHDDBEszmVkNUEHSkDXsgGNydrkbr4PYHmoosiY1k=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:5b:58:33:9d:03:cc:c3:ff:f9:51:3c:b9:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Aug 5 19:02:46 2025 GMT
Not After : Aug 6 19:02:46 2025 GMT
Subject: CN=51a5d6b114e5489700de4ed5d3b9e09bebc508dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:43:e4:31:21:cf:4e:64:3b:3e:bd:76:72:
e9:15:c3:4b:9a:34:b1:f7:22:d2:9b:65:54:dd:d4:
e8:f3:a8:e0:29:db:3f:db:8f:c3:54:9c:16:29:a8:
91:dd:ae:86:b1:7f:f0:6f:58:8e:97:c2:13:65:22:
a6:10:45:38:23:f7:aa:e8:b8:95:7a:59:1f:4a:c9:
81:3a:60:48:0a:a9:8f:1b:9f:04:62:56:c4:0f:0d:
69:26:98:b9:04:2c:f7:4a:6c:35:1e:b9:37:ef:c2:
94:cc:b9:f8:f7:8e:64:48:07:1f:98:a1:68:10:fd:
18:47:0e:2d:66:0f:8f:a5:00:36:f5:0c:29:59:cb:
c2:bd:85:85:0c:1d:85:33:66:f6:46:c3:d0:0c:21:
51:55:6b:b7:c7:6b:2f:14:b9:b5:a3:5f:1d:c1:53:
6f:d7:e1:ba:e3:73:4b:64:fe:20:52:1d:2a:d4:f2:
76:89:9c:72:b4:f5:9e:3b:d1:ab:02:db:f0:02:7a:
b0:38:ce:5a:e8:d8:7d:04:18:70:af:e9:f6:d6:aa:
46:0e:5a:7c:6a:dd:90:96:25:04:39:7a:89:8c:fd:
83:6b:19:f4:58:5b:29:0a:1b:b0:fd:4a:ed:43:54:
81:b1:29:e0:3a:4b:f5:5a:84:31:7e:a7:fa:3f:02:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:D6:B1:14:E5:48:97:00:DE:4E:D5:D3:B9:E0:9B:EB:C5:08:DD
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1c:c5:bf:8c:bd:85:54:c2:66:63:b5:bf:43:7b:f3:97:06:
1d:db:ab:0f:c9:6a:a9:c1:56:15:8d:6e:cd:d2:cc:e0:82:05:
45:bb:63:b9:16:87:71:68:4d:f8:09:b0:4d:40:95:be:21:e8:
bd:de:02:74:98:d9:c6:54:52:08:3f:54:50:0b:8c:bf:dc:77:
63:6c:96:90:73:35:64:53:64:80:e3:f8:22:f2:14:bc:36:b0:
9e:e6:17:39:aa:52:fa:77:70:97:91:7e:6c:58:56:29:7b:09:
81:1f:08:ba:f6:f9:34:6f:64:25:c8:f4:e4:c4:a1:6b:a4:29:
ca:cb:c4:be:dc:f3:a6:f5:9a:60:b1:af:55:1c:10:79:66:9f:
40:6d:77:45:25:98:68:ff:00:23:ed:49:03:2a:89:b2:59:43:
99:1b:ae:94:9e:6a:36:fa:ef:f8:23:1e:2b:01:2e:7e:70:ca:
1c:76:e7:6a:d1:28:74:0d:6d:6e:df:13:89:85:47:0f:87:ff:
e4:9f:f1:16:8b:c9:7c:16:18:52:0b:a1:99:c8:cf:d2:39:ee:
fb:32:5f:48:af:c9:96:d5:49:9a:3c:e6:76:b3:fc:7a:06:f1:
fc:2b:e5:b6:a3:c6:6c:25:9b:a3:79:fb:56:b3:79:47:31:12:
82:e9:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:23 2025 by rpki-client