Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier: DrpBDXwECom7JSIGCh1qKRADtOyv/FcgEqEJll+WybQ=
Subject key identifier: FF:B7:DB:B1:AD:44:0B:7E:4A:D3:DC:D7:39:15:DA:F9:F9:F6:52:2D
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 019874505DEAA4FFF1B5CE416E9E664FDB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 09:01:20 +0000
Manifest this update: Mon 04 Aug 2025 09:01:20 +0000
Manifest next update: Tue 05 Aug 2025 09:01:20 +0000
Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 3aDrh2QSQh63nbgX5SwB/hcDNQjo90Z3EpElCON3C3A=)
3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5d:ea:a4:ff:f1:b5:ce:41:6e:9e:66:4f:db:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Aug 4 09:01:20 2025 GMT
Not After : Aug 5 09:01:20 2025 GMT
Subject: CN=ffb7dbb1ad440b7e4ad3dcd73915daf9f9f6522d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:91:89:c0:f2:54:85:e0:b2:68:e7:ba:a7:
75:3e:a4:f1:9f:e0:3e:f0:9d:40:3c:35:a7:9c:69:
4c:15:3f:cb:81:d6:e5:e3:f2:30:9b:7f:51:47:c8:
d0:17:50:33:25:56:01:11:bc:9b:2f:8c:82:5d:fa:
9e:8b:24:6a:ff:8b:a9:e3:ba:60:f8:1f:77:6b:68:
0f:5d:14:b1:48:84:6a:c8:a3:8d:4c:41:15:bc:67:
80:f1:90:69:38:3f:75:7f:3e:b9:ff:ec:29:96:ec:
60:6b:6a:5f:d8:28:10:e6:84:02:99:01:a6:14:84:
1f:86:82:12:64:86:8a:0a:57:ae:d9:20:c1:9c:ef:
76:2e:1d:77:8b:92:aa:64:95:f7:89:0b:9d:5f:b8:
4a:3a:b4:fc:a2:6b:37:c4:47:db:2c:94:65:c4:93:
ba:87:41:78:33:00:a3:47:28:73:2f:8c:9b:e7:b5:
46:2b:3e:cf:70:d9:39:6e:45:ea:f9:da:79:35:18:
45:d3:c0:29:59:36:79:15:43:f3:ab:34:62:27:c6:
ce:87:a5:be:3b:40:4e:a1:48:35:07:ed:8f:e7:49:
71:53:d1:3b:42:db:e3:eb:0b:6c:f5:b3:dd:3d:87:
d0:b8:ee:68:24:ff:c4:15:a8:e6:79:aa:9a:e1:36:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:DB:B1:AD:44:0B:7E:4A:D3:DC:D7:39:15:DA:F9:F9:F6:52:2D
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:d2:3f:71:67:52:3e:38:05:f6:3f:23:08:24:39:a1:3c:
ee:77:7a:54:ca:6d:d8:b5:a9:07:1b:7e:4f:d0:38:60:3e:06:
35:10:62:01:d5:fa:8a:e9:c2:ff:36:e3:5e:24:d9:28:0d:8a:
0e:92:da:61:8f:9c:55:80:bd:9e:ac:4f:77:53:95:74:f1:4a:
8c:5a:3b:bf:e3:69:c6:fb:06:09:df:b3:bd:49:46:b9:3c:de:
79:e7:88:48:86:d5:cb:49:8e:87:1a:65:91:85:6a:37:da:8d:
d3:83:d0:dd:2e:25:98:0e:bd:14:d4:d2:3b:bd:39:f5:e3:8e:
0f:20:30:69:e1:20:26:9d:fe:34:77:82:9a:83:95:8f:11:e2:
03:05:e4:fc:b8:38:8d:01:36:95:39:d0:a4:ee:18:c6:c5:42:
34:be:61:2f:6d:84:b0:1e:d4:bc:2b:a8:cd:fd:2b:e6:d2:7a:
40:fb:42:9a:3e:3c:b2:4f:7d:6d:9a:66:55:c8:6d:f2:ab:0f:
15:94:d3:15:8b:d2:6c:e2:48:be:c3:52:14:b9:eb:d6:7a:ff:
17:ff:61:8e:fa:7d:af:7f:1f:7b:d2:80:72:a6:54:d3:2d:86:
e4:2e:20:e2:5a:b6:b6:58:a1:c9:6a:1b:06:cf:2f:b3:a1:89:
da:0e:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:05 2025 by rpki-client