Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: 2oegzk3iQKV6pI5hrryLOeUH7LQke59LhSwS+tm7cZ0=
Subject key identifier: FD:B5:01:70:25:DA:87:BB:A4:B2:08:4F:05:3F:B3:0A:E7:8C:10:F3
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 01988E7DA34F72FA0CDB317F0C6EC1741D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 14FE
Signing time: Sat 09 Aug 2025 11:00:55 +0000
Manifest this update: Sat 09 Aug 2025 11:00:55 +0000
Manifest next update: Sun 10 Aug 2025 11:00:55 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: 37O1F7niXVfXI0SB6XGFdZmlHXW/+UoPXZ1AVkim4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:a3:4f:72:fa:0c:db:31:7f:0c:6e:c1:74:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Aug 9 11:00:55 2025 GMT
Not After : Aug 10 11:00:55 2025 GMT
Subject: CN=fdb5017025da87bba4b2084f053fb30ae78c10f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:97:da:cc:f5:75:25:b6:8b:eb:55:a2:3e:
17:07:e2:c4:3d:ac:0a:14:35:ed:db:4a:71:ef:44:
48:ea:72:d6:1d:7f:86:f8:83:99:df:af:72:a7:7a:
35:86:ba:c4:2b:b9:72:0a:51:e2:ba:c7:dd:e0:55:
56:87:30:52:db:e4:4c:06:cf:6f:5c:5c:64:18:25:
f9:c6:55:6e:9a:34:13:40:51:43:fe:c4:5a:db:96:
fe:ad:35:f1:07:87:87:24:35:6f:dd:c5:26:73:4e:
30:84:99:13:58:35:3e:7a:f3:39:a1:45:07:9c:e7:
66:84:a5:07:82:89:8b:1b:a7:bb:5a:fa:41:ee:cf:
fc:b6:34:7a:da:21:34:60:59:23:72:b7:54:77:62:
49:74:e2:21:e1:63:bd:c4:ee:af:b4:a3:30:14:d5:
b2:7c:8e:12:52:51:ca:e1:91:3b:88:4a:44:f9:fb:
2d:74:8d:86:0e:91:98:11:55:5f:5c:98:40:4b:5e:
ab:61:93:18:98:e7:90:83:3f:11:e5:2f:e6:70:d8:
e4:64:e7:89:37:10:a2:cb:58:73:08:8c:90:05:93:
a7:6d:68:e6:54:bd:17:ad:d3:ef:4b:f5:1a:bc:3b:
d4:10:f8:b2:bf:66:fc:cc:c5:35:29:2f:61:cb:74:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:01:70:25:DA:87:BB:A4:B2:08:4F:05:3F:B3:0A:E7:8C:10:F3
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:60:4a:79:7f:a3:0b:7b:6c:20:0c:a9:6d:9b:0b:d6:4e:
66:fc:33:da:c8:16:15:05:64:71:76:0d:eb:72:21:df:58:3b:
e8:2a:5a:3b:93:14:ff:50:a3:fd:4e:c2:a1:68:0d:bf:16:5c:
c7:18:d8:c0:32:33:48:57:3a:cb:42:fa:96:d8:11:a4:c0:5f:
0f:56:13:46:fc:74:f7:4c:ab:26:d9:56:5e:f9:c5:9f:5c:5b:
73:3a:be:92:0a:1a:a4:18:d3:d1:72:ea:b0:a5:bc:57:8b:6b:
81:d0:71:35:ce:01:33:ee:8f:02:44:98:42:15:2a:2c:3e:72:
70:ac:34:92:bc:88:82:a2:54:48:be:d3:24:3b:f2:7e:3f:96:
02:ec:33:49:53:9b:52:7c:d4:31:51:11:b8:a7:fe:48:86:e7:
ea:ad:d0:8a:df:45:ba:8b:36:05:2d:ea:42:63:72:4b:1f:aa:
c5:67:1a:08:ef:10:e6:0f:d1:5f:6d:41:ce:75:11:52:25:cf:
0d:41:5b:56:ad:59:5b:e2:94:58:33:b3:84:7e:7a:19:89:de:
33:14:b4:3f:c7:01:e8:49:57:d0:aa:cd:e9:59:98:b6:7f:94:
ac:b8:f6:1a:13:d0:b8:4a:95:ef:6d:d4:ae:16:07:d3:87:b0:
9f:22:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:16 2025 by rpki-client