Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: VRi6dsJq1iRXy6tuyS1No08QEpRNgsZ36Hy/IQ7hdgc=
Subject key identifier: 20:DE:67:A2:09:20:CF:99:3F:CB:2B:A1:23:22:74:4A:FE:C1:49:89
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019882E7D9D7B14F3CE51ACB17E1A18CDBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 10E9
Signing time: Thu 07 Aug 2025 05:01:29 +0000
Manifest this update: Thu 07 Aug 2025 05:01:29 +0000
Manifest next update: Fri 08 Aug 2025 05:01:29 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: W13HIVeHkem79gVaD9yQBBX44CictmQ0wnHmplD6vtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:d9:d7:b1:4f:3c:e5:1a:cb:17:e1:a1:8c:db:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Aug 7 05:01:29 2025 GMT
Not After : Aug 8 05:01:29 2025 GMT
Subject: CN=20de67a20920cf993fcb2ba12322744afec14989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:7e:f2:78:d4:4f:36:47:18:fc:e6:37:d8:
89:51:46:a8:e4:5a:1c:e1:68:6d:04:8d:f8:57:12:
1a:c1:c0:dd:cc:8e:f2:1e:e6:ae:70:32:f5:52:e4:
77:72:34:92:09:20:59:ed:3a:7a:d2:b7:00:f2:a1:
f4:71:e9:d4:f4:a3:43:91:96:37:f3:27:2a:95:85:
79:25:95:ec:4b:59:0c:97:a8:78:61:34:41:39:7c:
27:fd:5a:ed:b5:0d:61:41:d2:a7:df:c7:c1:17:7b:
04:f9:54:cb:fc:39:e7:fd:ec:2c:24:93:c8:2d:cf:
1b:95:90:82:09:82:e3:3c:4a:7c:b2:07:59:fc:fe:
ce:96:73:6a:c7:52:73:0a:7b:52:60:c4:cf:db:92:
9c:c3:e4:67:74:35:33:ea:96:15:9a:90:18:df:91:
4a:5d:3f:83:97:c3:c1:4f:8e:eb:60:9f:06:fa:2d:
4c:9a:70:b6:87:38:30:e7:ce:f7:2c:22:ea:22:56:
e1:6a:4d:8f:fd:5c:94:94:d3:2b:e0:69:c0:61:c6:
39:d4:9d:94:63:66:7e:4a:91:64:9b:ee:f3:ab:75:
7f:05:83:cb:7b:02:d1:b2:c5:81:a2:0a:7e:95:8a:
c7:8b:2e:6b:dd:0b:34:5e:04:c0:db:03:11:23:4e:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:67:A2:09:20:CF:99:3F:CB:2B:A1:23:22:74:4A:FE:C1:49:89
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:ce:b7:35:75:3b:31:48:bd:f4:01:b3:9a:db:25:72:05:
43:56:85:01:cd:ef:84:d2:11:b3:ea:19:f1:7e:47:73:eb:47:
44:05:b0:07:f2:80:d9:25:3f:e7:96:f2:6c:e3:ac:ab:1e:28:
62:eb:e3:aa:14:19:e9:d8:83:59:0d:31:f9:28:76:53:9e:9d:
7a:85:59:2a:28:8a:db:ad:e6:b1:52:dc:51:b5:57:1c:f1:bf:
b9:42:17:30:2e:43:7c:1e:39:b4:82:88:c4:14:df:c4:14:af:
b3:bb:58:92:95:fc:65:93:c1:58:bf:49:24:3a:ca:d0:4a:13:
50:d4:ac:ee:7c:07:f4:0a:a4:8f:db:61:0b:a5:9e:e4:10:4a:
f0:5c:71:bb:5b:de:74:1d:03:bf:9a:7d:31:55:dc:be:1c:bd:
93:86:75:fc:60:c7:f8:69:e0:91:47:25:75:c3:cc:4a:67:75:
45:44:71:f0:c9:50:40:34:91:2f:18:37:9c:a6:14:13:cb:b1:
d2:16:c3:df:d1:fa:27:46:aa:19:c3:71:97:2f:35:3c:1c:ea:
91:24:69:2e:a2:57:3c:11:49:78:bc:55:eb:5a:0a:26:50:e1:
6a:f2:bb:49:44:a0:5f:53:03:90:2b:3f:4d:fe:eb:f7:0b:77:
68:b3:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:05:40 2025 by rpki-client