
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: DBz+PWTviQoUZD4KdEX51TErWpwc2du3fdjSj2ttyc0=
Subject key identifier: DC:A5:AC:6F:96:8B:5B:7A:70:73:CE:0A:4F:F0:88:72:A4:2D:92:82
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 01987D1C53AF0D5DAB9A98B1275D331C74F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 02:01:05 +0000
Manifest this update: Wed 06 Aug 2025 02:01:05 +0000
Manifest next update: Thu 07 Aug 2025 02:01:05 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: lA/n3Q9HIPedcDaw4Tj4tuPFzcL3o2w7LGMyfsbDDPM=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:53:af:0d:5d:ab:9a:98:b1:27:5d:33:1c:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Aug 6 02:01:05 2025 GMT
Not After : Aug 7 02:01:05 2025 GMT
Subject: CN=dca5ac6f968b5b7a7073ce0a4ff08872a42d9282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:a5:60:ee:c8:0c:ab:22:63:5b:ed:06:1c:
08:4f:7b:c8:82:51:ce:cb:0b:b6:7f:9b:79:3f:37:
49:35:d4:e3:04:fd:7c:ab:b5:8f:cc:6d:6b:96:41:
42:88:b2:8c:39:cd:86:c5:e7:7b:b1:7f:2b:c5:33:
64:16:c2:bb:62:9f:8a:ed:19:b1:2e:29:7d:e4:cc:
87:66:65:15:7d:b7:ff:6b:69:c7:b6:43:4a:5f:9d:
aa:bb:37:65:74:8f:15:9f:27:99:7f:8c:46:33:72:
d2:d0:eb:58:42:2a:5e:6e:c4:bd:81:4a:a4:3d:c6:
5d:9f:9a:26:f9:63:6c:4f:87:dd:c7:79:a4:d4:b5:
70:5f:d3:f0:8b:33:91:51:f3:2f:94:bf:9d:35:4b:
12:55:44:95:58:2a:94:30:ff:13:96:61:12:b9:9e:
f8:27:86:da:ef:03:8b:70:c6:33:78:38:4f:3c:fc:
14:be:b8:08:c3:44:83:fa:ba:16:44:8c:b3:95:d9:
ce:b6:bb:95:d1:4a:c4:58:20:f3:e4:4d:c0:98:5f:
48:c7:e1:f5:a8:e1:62:7f:af:6a:4a:4b:7d:76:9f:
ca:35:4d:31:42:d4:40:c1:d1:af:40:9e:7e:c9:66:
b8:0b:8f:c6:53:f6:3b:b7:9e:ef:f0:fa:ef:96:3e:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:AC:6F:96:8B:5B:7A:70:73:CE:0A:4F:F0:88:72:A4:2D:92:82
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:5a:27:79:32:3f:92:a5:be:66:ba:48:99:33:ec:b6:10:
00:e6:36:c5:90:62:e5:ef:13:4e:c3:c7:7e:ec:4c:d2:03:70:
9c:8f:e8:c9:c8:b6:fe:82:ca:97:fe:a3:8a:bf:ff:44:64:27:
d2:60:bc:fb:69:9e:7c:dd:b8:67:f2:8a:13:b3:ce:01:70:fc:
a7:fd:8d:60:8b:29:87:fd:a2:a4:a1:0e:2b:82:44:8f:40:ba:
73:a1:d8:af:46:37:ce:2e:f4:19:ff:cc:89:ff:3b:02:5a:97:
d2:c1:24:0e:8f:0a:38:7a:9f:ef:04:bb:36:10:51:e4:4b:73:
41:ab:dd:41:84:b1:a7:0b:ab:79:ce:8a:0c:e1:28:c1:78:2d:
31:8f:93:5f:01:cb:fd:8f:8f:87:53:bb:e2:51:2f:e7:cf:92:
78:8c:d9:d7:59:95:83:e0:ad:93:6c:7f:18:58:b5:a3:4b:6e:
74:06:24:29:ed:d6:46:49:60:7c:ae:91:6c:38:6e:16:52:3c:
5b:7d:e9:66:3a:1a:e6:af:13:28:4e:e5:fd:12:50:ad:7e:a4:
83:0f:97:6a:6a:29:10:44:3a:f3:cf:32:08:e2:a9:4e:e0:6c:
eb:8b:4b:96:db:ed:95:1b:06:f6:75:11:d3:99:f6:1b:47:c2:
d2:86:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:27 2025 by rpki-client