Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: OfE5TYb0SxXX+SqpkYeB1JPB1F+90qtTwVaNP93+jYw=
Subject key identifier: F4:07:39:A2:A6:49:DD:C2:0C:08:48:A8:DF:E7:E0:59:FC:71:D9:44
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 0198793F72AE80A73BCE8D3295CA4A93BA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0460
Signing time: Tue 05 Aug 2025 08:00:57 +0000
Manifest this update: Tue 05 Aug 2025 08:00:57 +0000
Manifest next update: Wed 06 Aug 2025 08:00:57 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: QgpUGISkowPGdhSzmQMh9Z9qglvLEnEUlgj3nGkzEXs=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:72:ae:80:a7:3b:ce:8d:32:95:ca:4a:93:ba:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Aug 5 08:00:57 2025 GMT
Not After : Aug 6 08:00:57 2025 GMT
Subject: CN=f40739a2a649ddc20c0848a8dfe7e059fc71d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:b1:ad:8c:8b:ef:21:0b:10:1e:90:0e:b4:
47:61:45:ec:ee:a5:9d:59:61:5c:30:0f:66:52:ff:
08:1d:5e:36:03:b3:13:31:ec:7c:63:5f:be:37:ff:
93:05:c9:65:f0:ff:e1:fe:1d:7c:1f:ab:8f:6b:73:
97:d4:34:aa:ab:0b:6a:6c:29:68:99:0a:26:e9:01:
85:27:28:42:5d:e9:13:d7:e8:a8:a3:78:3d:ca:39:
42:79:47:f6:28:34:71:30:a7:ad:a3:81:fa:27:a8:
ac:cf:ab:db:eb:36:8c:4c:77:80:e3:b0:6e:25:6a:
6c:22:46:67:8f:7c:90:80:93:b1:af:5a:9e:4f:07:
b4:c5:ea:bd:b1:90:98:d5:d2:07:52:a4:2a:37:68:
18:ca:e7:ee:3d:16:de:97:fc:60:73:fb:ba:8d:bc:
ca:c9:c9:ea:c3:bf:4c:f3:5b:4e:11:1b:38:7e:e5:
76:0e:42:16:53:3c:97:fe:6d:f9:e3:23:60:d0:fb:
0f:e7:b4:19:3b:f5:a2:1d:44:db:27:61:64:2d:ca:
0a:2a:9e:92:7c:e0:06:e0:a1:a4:f2:a2:25:6a:40:
f7:a0:11:28:10:80:6f:d5:4c:4d:18:58:f6:f8:f3:
cb:10:d4:0e:b1:84:f0:18:42:ee:44:58:2c:eb:7e:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:39:A2:A6:49:DD:C2:0C:08:48:A8:DF:E7:E0:59:FC:71:D9:44
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:9b:be:b0:dc:ab:ba:7a:47:ee:9c:c5:04:2c:bd:0c:ea:
69:d5:64:20:73:da:65:88:ec:62:b2:a7:c9:cc:1e:fb:ef:48:
26:db:90:44:78:67:4c:16:9d:ca:1c:a7:9b:aa:54:b6:99:ef:
d2:9a:cf:27:40:f1:d9:7c:55:fe:14:85:6e:7c:d9:ff:bd:13:
ca:ed:29:50:fc:1c:54:14:72:43:60:a7:08:05:5d:7e:12:45:
ed:30:dc:aa:e8:7d:cb:2f:4e:52:63:96:68:f0:3f:12:01:d4:
3d:64:c7:11:d6:1d:50:3b:7f:29:6c:0f:1f:bb:6f:ac:df:fd:
58:1f:4e:7a:e4:1e:ad:e8:92:95:44:2d:2e:79:4f:d0:18:3a:
ab:4f:06:d1:05:ab:bc:88:cd:2a:66:b9:10:1e:81:e7:6e:bc:
27:9a:32:4a:70:79:a2:d1:da:36:e0:7f:ec:50:4d:75:20:4c:
74:51:ad:8e:65:55:d7:da:f6:77:bf:2a:3d:e0:7d:81:ac:aa:
61:6c:39:5f:4f:f4:85:c6:0a:d2:0a:c6:bd:96:ef:88:67:5b:
df:41:35:a9:2c:7b:42:a9:83:7a:4b:a4:fe:f4:cc:e4:f8:bf:
10:17:6a:60:22:93:76:a0:86:b6:8e:f7:1e:3c:5f:83:0b:98:
fc:97:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:52 2025 by rpki-client