Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: dNiixi+H262t6zc0Ub3NL9om3mH5GU44kHpLA2agbEY=
Subject key identifier: D0:72:A6:09:BE:2A:78:14:06:27:01:09:DB:5C:6D:E8:B2:E4:8B:94
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 0198D6CDFC7A7BAACB91377FC9564421D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 12:01:20 +0000
Manifest this update: Sat 23 Aug 2025 12:01:20 +0000
Manifest next update: Sun 24 Aug 2025 12:01:20 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: FkQvGbdHX+9xTKFqrlltoHpncPR65ZY4B7ku3kzKn+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:fc:7a:7b:aa:cb:91:37:7f:c9:56:44:21:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Aug 23 12:01:20 2025 GMT
Not After : Aug 24 12:01:20 2025 GMT
Subject: CN=d072a609be2a781406270109db5c6de8b2e48b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c3:40:8b:01:41:ed:c2:3e:86:48:96:1f:01:
d5:2c:f8:8e:22:a7:b4:d2:2e:20:0f:b4:80:6d:ff:
41:d2:8b:9d:1c:57:56:14:00:8e:ca:e5:ef:14:4f:
8c:8a:f2:25:8e:01:c2:73:90:be:3b:01:7a:9e:d7:
24:88:71:6e:ba:4a:18:7a:da:09:70:f7:96:8c:ad:
11:58:c5:59:04:87:24:25:8f:4f:16:27:8c:16:8d:
7a:31:58:d8:31:eb:57:d9:e8:aa:16:4c:9e:28:84:
30:cd:12:fd:99:e8:8b:06:7c:52:09:42:5a:35:d1:
8b:c4:17:6d:50:37:61:18:26:2b:3f:8b:40:85:50:
95:b2:3b:dd:0e:46:a5:cd:68:e0:67:02:60:93:ae:
0a:42:74:70:f6:40:a8:c7:8c:eb:7c:79:36:ca:9a:
da:f2:1b:c6:7b:1c:2f:f4:32:aa:b4:e8:24:1f:9d:
cf:d5:34:c1:56:ca:02:bd:15:e3:f7:75:71:bb:23:
1a:2c:2a:ac:f3:7b:79:2d:30:4a:43:2f:b4:6b:9c:
27:63:0c:e5:bf:76:d6:f4:b1:d6:b2:a6:0b:f4:9a:
b2:4d:44:0c:3b:7e:62:aa:6c:ef:c1:c7:a4:b9:9d:
0e:e4:b1:d2:69:ff:ab:3d:32:34:2c:4b:15:95:e5:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:A6:09:BE:2A:78:14:06:27:01:09:DB:5C:6D:E8:B2:E4:8B:94
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fb:bf:6a:c3:52:06:11:c6:c8:bf:59:75:ed:41:c0:78:82:
fc:e6:5c:d6:ca:f9:87:49:b1:d0:7a:c5:1c:22:de:85:c4:d7:
58:99:82:f5:db:cd:66:a9:af:60:f8:bb:de:85:b0:79:5d:61:
2e:62:1f:e2:d4:8e:62:29:83:2e:7e:cb:61:72:f6:9a:b5:66:
b5:42:86:46:98:4a:d0:45:31:bf:5d:c6:d8:bf:7a:17:79:97:
8d:8c:d0:f9:5d:7e:fc:f4:f9:9e:f6:de:af:8d:a3:07:3e:35:
07:a4:a7:3c:21:fd:89:f5:18:a8:86:fb:ae:89:3b:ea:bf:31:
8f:81:ec:8b:b3:e5:67:8f:a6:2a:ea:e5:f1:09:30:f0:2e:56:
ca:ac:84:00:d6:ba:46:d4:10:07:34:87:f7:6d:28:e7:d7:f7:
90:8c:b7:06:3e:1b:11:79:42:df:8b:b7:2a:e7:d1:33:3e:c2:
17:e4:61:d0:bb:dd:b2:c5:2b:2c:0b:25:39:49:44:f3:aa:ea:
b0:e0:c6:07:32:2c:b2:81:77:23:ff:d7:63:1d:00:a4:1f:78:
24:1d:c9:27:ca:80:1f:da:25:d3:3c:4f:a5:6b:52:61:01:8a:
93:90:a7:4d:57:1e:e6:62:77:f2:9f:2c:b9:70:a1:a3:d0:82:
b6:46:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:41 2025 by rpki-client