Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: NKJScpeTwl3UHcXmi6Bw3d8W3iJxJOzsjZuYITDL4cs=
Subject key identifier: 4C:90:B1:81:2A:EF:08:0F:1E:E0:7C:F2:86:B0:A7:AF:87:B7:A8:5E
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 019882435BFAD15DB531D14270F13571DEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 15ED
Signing time: Thu 07 Aug 2025 02:01:48 +0000
Manifest this update: Thu 07 Aug 2025 02:01:48 +0000
Manifest next update: Fri 08 Aug 2025 02:01:48 +0000
Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: uUYK99dSVUsDpoghDbJ3I7yOc836cvBIWDqJyneygbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:5b:fa:d1:5d:b5:31:d1:42:70:f1:35:71:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Aug 7 02:01:48 2025 GMT
Not After : Aug 8 02:01:48 2025 GMT
Subject: CN=4c90b1812aef080f1ee07cf286b0a7af87b7a85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:07:cc:ff:0b:09:af:41:91:d3:96:ee:0b:
2e:0c:f0:51:5b:b9:18:6a:a1:d0:08:2c:82:98:90:
c9:8e:65:a3:03:05:3b:d4:6c:2b:84:39:26:7a:43:
6b:9d:21:99:32:10:7a:ba:af:dd:90:25:0c:25:db:
33:23:23:be:16:5c:ec:48:bc:59:17:fb:b6:52:40:
58:7b:92:ac:e3:c4:b2:2b:1a:a4:39:8f:9a:f8:ce:
4d:88:89:c6:29:0f:34:f2:be:56:2e:63:0d:99:87:
be:ec:40:ea:79:5e:d6:56:e9:8d:f3:2d:2c:4c:08:
a4:cb:76:92:c4:ad:35:0b:1e:98:0f:ae:95:7e:cd:
a0:6d:c1:68:39:61:41:d8:0c:3b:a3:c3:f9:f5:87:
e0:d0:76:fa:96:c1:c8:fa:1a:af:8e:b6:cd:f2:5b:
69:21:c4:8e:fa:7e:71:e9:03:a5:64:70:8e:03:16:
b0:e1:31:53:77:a8:98:ea:a3:fc:06:9e:cd:8e:44:
83:1a:51:9a:cd:6b:d5:4a:dd:ca:ff:a8:e3:45:42:
d0:16:b4:d3:ba:27:01:d0:6e:5f:9e:87:1b:44:4d:
c9:4a:fa:2c:39:8a:2e:4b:7e:e8:b8:3a:fc:c1:02:
90:98:8b:54:98:af:ec:c0:bc:41:67:3e:f4:03:ba:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:B1:81:2A:EF:08:0F:1E:E0:7C:F2:86:B0:A7:AF:87:B7:A8:5E
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ee:b9:3f:1c:06:ea:a3:80:93:e4:64:23:25:60:8c:e4:15:
ee:62:6b:41:f1:0e:e3:14:af:e6:ea:e3:02:f1:c4:ae:bc:c8:
2a:5a:ab:94:88:f4:f5:9a:61:da:25:49:d6:cf:18:ac:ec:36:
da:55:5a:f9:90:8b:74:6c:28:f5:95:fd:cb:a3:18:85:b8:b4:
7a:1b:f6:31:e2:22:a7:a5:f7:f8:10:cb:a6:0b:06:99:dd:39:
cb:31:68:c7:e6:3e:d4:18:ae:ce:e8:4d:d1:54:18:4a:83:47:
a7:a6:f6:e0:98:14:62:27:5a:16:3c:c0:bb:4a:6a:49:c0:f7:
77:a7:1e:f1:5a:a8:b1:b6:61:74:6d:37:66:25:eb:32:28:17:
ce:b3:61:4c:0e:e5:a0:60:7e:3e:6d:35:97:bb:1c:e3:8c:fc:
93:68:23:1f:8b:cb:e2:d0:9d:0a:42:71:44:e9:1d:7e:00:ef:
8e:74:9e:6f:66:15:e0:71:96:39:2a:50:7c:2e:44:d2:d5:c9:
86:d0:3b:fd:bd:eb:9e:a0:f8:95:e0:d3:91:b7:2a:18:c2:c7:
35:bc:3c:7c:7c:2f:7c:34:31:90:fb:a0:e1:51:68:ef:38:52:
73:d3:0d:5f:ee:8c:0a:98:8d:11:08:25:5f:be:f0:3a:24:09:
b3:3d:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:20 2025 by rpki-client