
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: pLsC/KrfIZAYGLrbJU8jn2fe3A4gaDmKR5Ah1T/nGj0=
Subject key identifier: C7:F1:DB:5F:5D:9E:6E:45:87:D2:84:08:2F:DE:E9:C6:9E:12:79:91
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01987F79E0E32FF0312488F454CE122CC619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 162A
Signing time: Wed 06 Aug 2025 13:02:30 +0000
Manifest this update: Wed 06 Aug 2025 13:02:30 +0000
Manifest next update: Thu 07 Aug 2025 13:02:30 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: sUYYErcF/z5KFAXKpDCnsswzmHV52A2lA0VpNnRp5Js=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:e0:e3:2f:f0:31:24:88:f4:54:ce:12:2c:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Aug 6 13:02:30 2025 GMT
Not After : Aug 7 13:02:30 2025 GMT
Subject: CN=c7f1db5f5d9e6e4587d284082fdee9c69e127991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:c3:24:2c:8d:03:11:2d:e9:00:e0:34:35:
3c:6a:dd:1b:b2:08:20:cf:5d:35:e7:4b:fe:77:ca:
7e:6e:c6:e2:78:b4:1f:84:09:2c:c4:9c:bc:1d:d7:
99:81:26:9b:58:56:69:a9:d2:fe:e4:dd:af:13:f0:
db:4d:9a:aa:b1:11:17:26:cd:9a:0f:10:44:a2:1b:
f7:af:ae:01:a3:bd:bb:a9:d2:24:f0:eb:ab:bf:d7:
d0:e6:80:35:68:54:fd:d5:d0:e2:c4:9a:7a:25:75:
f9:b2:b4:96:26:f2:32:e0:65:d9:40:a2:b7:43:a0:
41:32:b0:b5:3b:13:7e:33:98:d3:65:7c:bc:f2:87:
18:16:f5:4a:05:54:a5:35:79:c7:9b:7b:cf:2e:4b:
07:cb:57:77:66:2c:fc:53:88:b4:2e:dc:a5:fc:ef:
4d:b0:63:b3:90:57:5f:44:f3:6a:0a:52:a0:68:73:
e0:54:24:24:80:ea:a6:b3:54:19:ae:59:0c:4c:d4:
a5:b7:69:90:19:ab:b2:93:c3:05:fe:06:95:76:8b:
dd:05:b8:7f:22:98:2a:dc:12:09:f5:ad:c0:bf:1b:
48:80:3a:0a:c7:fa:e8:ce:6f:a1:6a:c8:53:9a:9e:
a2:61:02:4d:dc:7e:55:b0:36:56:49:99:c2:18:1e:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:DB:5F:5D:9E:6E:45:87:D2:84:08:2F:DE:E9:C6:9E:12:79:91
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:76:10:e1:d2:d8:22:75:fb:fc:68:8d:88:50:1a:09:6e:
f5:62:e7:fd:03:f9:65:b1:0e:20:ea:d2:44:8a:58:3c:46:01:
26:b5:10:6c:2f:a4:32:97:04:2b:66:12:f0:a5:7c:29:c5:e2:
6f:df:25:c4:a3:7b:a6:16:54:f6:e1:f0:80:aa:6c:e2:2c:a1:
7d:9a:4a:96:e2:d5:79:1e:b6:4b:5f:a1:65:03:ed:01:3c:78:
d2:3c:9a:57:52:ac:63:77:1b:20:59:16:34:6f:7b:88:7c:67:
e2:10:1f:29:9e:58:2b:b2:97:cf:99:1e:a2:53:ea:12:be:dc:
6f:f9:4a:bf:4a:4b:72:83:2b:3b:da:d3:e6:d3:7a:8d:76:ab:
ce:2a:e8:04:b4:56:44:92:5e:f9:a8:a5:a7:41:2d:72:9e:77:
3e:b1:9e:be:1d:58:8e:a9:4f:cd:a3:8f:75:9c:4c:ba:e4:ef:
c6:ff:e1:61:3d:75:8b:64:5a:2a:c4:92:c8:a8:29:bb:2e:0c:
4d:ff:60:07:c0:c4:2e:06:43:4b:50:c1:83:d6:e5:97:65:ca:
12:b1:e0:94:20:8f:dd:5f:b2:40:96:eb:ab:be:b5:75:8d:0b:
7b:01:1c:d7:a1:14:96:d6:db:c9:63:50:2a:c7:4a:7d:aa:3f:
89:b1:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:18:20 2025 by rpki-client