Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: /zp5PfT1p5yFoY+vmED3+hL6nwfkwv/x5Lh0rH+fV2o=
Subject key identifier: B9:ED:36:B3:45:B8:80:56:67:4C:CF:EA:52:6E:D1:94:E0:FA:82:23
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0198733DC523F28266F6697CAF23FF224568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 14C7
Signing time: Mon 04 Aug 2025 04:01:24 +0000
Manifest this update: Mon 04 Aug 2025 04:01:24 +0000
Manifest next update: Tue 05 Aug 2025 04:01:24 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: UQQ0Qzd13T4lCrt/zMSEbjG//1gjeprdl0Ky760PbKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c5:23:f2:82:66:f6:69:7c:af:23:ff:22:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Aug 4 04:01:24 2025 GMT
Not After : Aug 5 04:01:24 2025 GMT
Subject: CN=b9ed36b345b88056674ccfea526ed194e0fa8223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:f9:20:c4:29:38:5c:86:32:15:41:1e:d8:
45:5e:1c:0d:7e:62:3b:5f:e1:96:a2:8b:66:90:30:
49:dd:49:a7:60:c6:46:a5:9a:cb:ed:0f:b4:b8:b8:
e2:fc:34:53:a3:d4:f1:1e:74:19:f8:15:47:1a:cb:
94:48:fd:6c:f7:de:3a:e1:75:12:7f:aa:09:5a:74:
45:5e:f5:18:08:aa:f3:4f:79:c1:a2:0d:a8:b6:c3:
5a:87:2f:df:10:43:26:1e:26:91:0d:1a:5a:ca:f3:
51:1c:79:20:60:bc:e6:bb:4d:f4:03:c8:bb:68:a9:
31:35:96:26:9a:22:d3:c7:2f:bd:04:5e:d9:a0:f9:
01:c5:c2:be:dd:7a:42:0c:05:b5:52:6f:7b:2b:22:
d3:64:bc:4f:b7:c7:eb:51:00:c6:3e:80:cd:00:c8:
96:b7:08:8a:d6:07:ce:2f:06:13:9e:11:88:b9:66:
00:99:b6:78:d9:93:e5:76:00:b7:0f:55:8e:58:22:
24:01:29:e7:86:5b:48:39:aa:6d:74:b9:7f:9e:52:
dd:4f:b6:e2:f1:7a:66:de:15:47:07:45:1c:04:03:
d2:5f:77:e8:a0:46:be:19:47:54:2c:96:15:ba:5c:
82:b4:7a:73:ee:b5:bc:75:d8:b6:e3:c7:80:54:a3:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:36:B3:45:B8:80:56:67:4C:CF:EA:52:6E:D1:94:E0:FA:82:23
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:18:d5:e6:d3:ca:26:ce:29:5d:11:64:84:bd:54:c7:bb:3c:
fd:3f:ab:2f:73:80:81:95:8d:1c:6f:6d:3a:04:26:f3:c1:a5:
5d:45:db:5d:9a:b6:bc:34:46:8c:1a:5d:6d:58:dd:5c:09:ea:
55:ea:b1:ce:68:d0:74:6a:ba:21:56:02:45:60:90:8d:07:d1:
f4:9e:88:02:92:a6:96:1d:8a:91:4b:34:8e:f8:04:68:9e:7b:
4f:c9:60:01:bc:0b:31:6b:af:83:10:7c:7b:ee:b5:5f:73:a9:
9f:4b:a2:b5:90:a0:eb:29:1b:3c:66:98:4c:40:8b:45:86:07:
bc:f8:87:05:3b:ea:f7:8f:31:27:bd:54:dd:ad:3d:08:e6:64:
a6:a9:62:36:94:a6:25:4a:c4:c8:a7:af:05:8d:f6:0f:73:ef:
44:33:6a:35:e8:ae:bf:da:29:0c:92:00:a1:88:eb:ce:fa:63:
fd:72:67:81:4b:ee:05:a8:c6:6b:78:54:37:ab:bf:3f:dd:22:
45:43:28:89:74:35:12:8b:d2:1f:7d:95:fa:ce:f9:a4:d0:d8:
75:8c:61:47:30:6a:45:d2:d7:5e:43:7d:e2:f7:42:79:86:a0:
7e:b6:5d:f4:0c:8a:1f:fa:51:29:52:d4:06:ba:7e:81:85:52:
9e:5e:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:30 2025 by rpki-client