Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File: uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier: Uc0Z1swnQEY/SzrFTdd99fQXEJlSSAEXfVFU2WxL0p4=
Subject key identifier: 5F:EA:49:9A:DE:FF:7C:3A:D2:E7:C6:D9:F2:3D:50:07:B7:09:33:66
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer: /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial: 01988F22461FB7BB20F47330EC0760C4A15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number: 0AA5
Signing time: Sat 09 Aug 2025 14:00:44 +0000
Manifest this update: Sat 09 Aug 2025 14:00:44 +0000
Manifest next update: Sun 10 Aug 2025 14:00:44 +0000
Files and hashes: 1: TGrXflCdfRfW3fIuk1M0sun1vvs.roa (hash: alNQcjpWXoWXc70x5wuOV0VaoVsG9NOJ3xbbbXJM7RE=)
2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: ug01u7jvdRJFYeFT5DHlC4PtssqiHRt77pojuKR9U5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:46:1f:b7:bb:20:f4:73:30:ec:07:60:c4:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Validity
Not Before: Aug 9 14:00:44 2025 GMT
Not After : Aug 10 14:00:44 2025 GMT
Subject: CN=5fea499adeff7c3ad2e7c6d9f23d5007b7093366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:b5:a5:c2:51:ef:72:0b:e8:15:f0:94:bb:
7a:22:50:d4:3f:b6:e7:1d:df:2a:fe:5f:e4:f3:a7:
95:0b:d6:b4:ec:21:fe:d6:b5:b6:2a:c5:7a:f0:20:
19:58:de:51:0d:a4:e2:b5:03:3e:cd:43:1a:84:ec:
f2:a3:6c:85:24:a5:00:d3:62:10:98:8d:86:2f:17:
39:45:33:c7:7d:7a:31:08:a5:7f:68:97:46:d7:4c:
cd:46:5a:52:18:91:5f:d7:55:c6:b2:60:eb:e9:67:
ae:f2:18:ef:91:37:cd:36:9f:03:62:a3:37:f9:90:
7d:ae:de:57:d8:6b:75:98:7f:b8:fb:1c:2c:6f:a7:
73:92:09:68:42:5e:8c:05:5e:3a:88:5b:b3:0a:bf:
c7:2b:30:39:8c:cf:94:59:d6:b0:68:31:5f:4c:f4:
c8:99:90:8d:ee:82:2b:ed:82:63:15:ba:b2:fd:29:
9a:70:b8:a1:cc:4a:b9:5d:b8:53:57:7b:b8:59:06:
cd:35:e0:ec:ab:3e:80:75:04:cc:db:43:67:17:ce:
32:4a:ee:48:51:ea:81:71:34:20:20:30:e0:67:35:
45:84:df:05:f7:43:4e:62:a6:42:d8:e2:67:8c:da:
d5:f0:c1:db:64:5c:35:8e:cf:86:4a:0c:9c:12:27:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:49:9A:DE:FF:7C:3A:D2:E7:C6:D9:F2:3D:50:07:B7:09:33:66
X509v3 Authority Key Identifier:
keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:73:5e:39:38:32:fc:63:2c:51:f1:4a:06:93:b5:59:cf:
8a:6a:7f:e5:df:ae:7b:e2:41:84:80:69:09:48:d7:ad:a6:63:
57:ff:d0:1a:b3:2c:ed:2d:c5:9e:45:1f:a9:54:e9:75:49:43:
14:0e:ed:51:b7:e2:f8:95:81:8c:11:73:fb:0d:cd:00:67:68:
b4:51:27:f4:ff:7f:df:c9:2c:c9:2a:02:56:df:f0:a9:d9:6e:
88:f5:c2:b7:90:6e:9b:d5:4c:c1:cf:b0:32:46:7a:3d:18:ba:
cc:20:bc:6b:94:c4:40:97:37:42:aa:2e:cb:d5:1b:30:ec:da:
d7:08:4b:38:1a:6e:12:a0:53:c9:2e:01:b9:52:79:3f:48:49:
be:e6:40:dc:60:59:e5:ea:e6:72:85:3a:c9:c1:8a:5f:76:a4:
e9:b2:9c:c1:c3:c4:8f:de:7c:94:b3:84:5c:21:e6:e1:5c:88:
3b:11:20:c4:61:07:5d:e1:ca:83:93:e2:25:d5:b7:41:fb:d5:
de:a3:3e:02:3b:a2:9f:f0:6c:32:36:d8:ab:e5:88:4f:59:2f:
9d:2d:c0:3f:cf:c9:58:60:73:f4:60:b9:a3:94:af:53:81:95:
d7:bd:df:d5:6a:ac:05:df:b8:d5:33:2a:a4:d3:27:2f:fd:de:
03:57:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:50 2025 by rpki-client