Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: /eBf3mbIKxJN4dkEh/qV2usWa15Iud++2GiuMH48yew=
Subject key identifier: 74:C7:DE:5F:59:1D:EF:80:EC:99:04:69:52:7B:E1:19:68:BC:C4:8C
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019893DB0C8D5523B3F86769A80F10BF43BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0CB7
Signing time: Sun 10 Aug 2025 12:01:02 +0000
Manifest this update: Sun 10 Aug 2025 12:01:02 +0000
Manifest next update: Mon 11 Aug 2025 12:01:02 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: YJY4b0KOHWLUbEg01xESjqQ4fHnbY7799ILhTXcpWhE=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:0c:8d:55:23:b3:f8:67:69:a8:0f:10:bf:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Aug 10 12:01:02 2025 GMT
Not After : Aug 11 12:01:02 2025 GMT
Subject: CN=74c7de5f591def80ec990469527be11968bcc48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:f5:e6:ee:06:8b:2a:c6:48:a7:98:f7:ff:
8b:50:4a:5f:c3:09:f2:52:4e:e0:78:09:1c:22:9a:
a2:1f:ca:be:28:f2:4f:9c:26:23:c5:e1:aa:82:be:
65:33:bd:07:58:87:b3:ad:94:b6:b9:c5:e5:89:90:
ac:41:d1:5e:1c:2c:3b:21:94:6c:a2:95:b4:ad:bb:
9b:e5:1f:2d:e9:43:e4:ee:e8:36:e1:fd:b1:9e:93:
9d:b5:2c:7c:73:43:ab:f1:c8:9b:a3:f4:d9:22:6d:
41:c1:03:7b:b3:2e:4c:0e:85:8f:cb:98:a6:84:05:
4e:74:95:5c:e2:9b:18:4a:4e:fa:71:1e:b3:24:90:
45:b8:d1:e6:f5:75:30:54:3d:7e:6b:84:7c:d6:8a:
54:b4:8f:db:5c:77:c0:85:b5:d6:93:46:54:c9:53:
77:fd:18:00:fd:af:48:b0:0f:1b:71:c2:7e:a5:a3:
e5:75:0c:b4:29:81:ab:fb:58:1e:25:6a:3f:0f:f6:
56:a6:84:43:0c:67:e4:2f:18:41:71:d3:02:71:47:
7d:4e:32:80:8c:e6:2c:72:04:7d:9e:63:89:bd:dd:
b1:8f:63:39:5c:11:0e:37:a3:54:f9:ea:cc:6c:23:
a2:87:67:84:7b:57:22:df:39:53:05:5e:6c:c7:28:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:DE:5F:59:1D:EF:80:EC:99:04:69:52:7B:E1:19:68:BC:C4:8C
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:38:8a:bc:59:dc:38:eb:c7:fc:a2:51:a9:52:dc:db:89:
19:da:30:de:fc:03:50:31:63:3c:90:36:a2:a3:54:85:76:53:
35:ec:1b:34:b7:ca:2d:ec:a0:d2:c1:e1:46:72:fd:b1:2a:aa:
f0:05:df:09:1a:75:db:75:92:a7:0a:58:1d:39:62:d9:56:9e:
fd:d4:0e:eb:61:4e:0c:24:18:85:7d:6a:82:8c:b6:38:a1:b3:
9a:7a:e3:91:b3:09:ec:58:83:de:a3:8d:5a:8c:b6:ea:35:9a:
0d:01:7e:48:6d:b2:18:1d:56:d8:53:31:89:a8:cc:b9:b8:34:
b9:b4:e4:d7:d4:66:e5:e6:3d:62:5e:81:79:a1:13:6e:e0:97:
82:77:30:06:47:c4:20:f7:01:85:b9:5f:9b:be:6b:cf:1b:bc:
4a:3d:f7:98:af:27:6d:37:5b:fa:21:cd:df:12:ba:62:d9:cc:
48:f6:a8:64:4f:c2:b9:25:cb:79:c6:9c:64:cc:06:99:9a:b4:
7e:21:7c:fc:b2:50:4e:86:c1:9e:90:14:7d:e8:8f:c2:ae:2a:
1a:ba:ee:8c:b5:bb:9f:42:94:67:4b:2f:29:ff:b0:87:42:2f:
1c:7d:be:be:db:85:74:61:2d:b0:f2:eb:3d:61:2e:20:0b:c4:
a3:a2:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:57:40 2025 by rpki-client