Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: tThw/RyN21Q9vkDlrB/0dVzHhy1uJ7cky14amUr4968=
Subject key identifier: D6:94:50:17:EF:FC:4E:95:D9:A4:B3:4E:0A:0A:53:04:5F:81:35:86
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 0198D404D35E2960D1BC21F5EA8FD76A7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 0915
Signing time: Fri 22 Aug 2025 23:02:22 +0000
Manifest this update: Fri 22 Aug 2025 23:02:22 +0000
Manifest next update: Sat 23 Aug 2025 23:02:22 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: pZlSblP/62O8WdJkv4mwP7+m08ofzuHhNkg8kuvFNwo=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d3:5e:29:60:d1:bc:21:f5:ea:8f:d7:6a:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Aug 22 23:02:22 2025 GMT
Not After : Aug 23 23:02:22 2025 GMT
Subject: CN=d6945017effc4e95d9a4b34e0a0a53045f813586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7a:74:7a:63:11:d9:19:1f:5a:ce:e8:9b:c6:
ed:36:c2:dd:48:75:be:4e:83:78:c9:75:d4:6b:44:
f9:72:5c:2b:c5:8c:72:dc:9e:2d:b4:73:40:73:5c:
66:5c:7b:dd:02:15:32:df:fa:53:03:aa:67:96:0c:
5d:da:a6:34:5c:dd:2e:cc:55:a4:47:ae:5d:43:3d:
52:a6:88:e5:6d:37:40:83:2e:af:84:93:93:d7:eb:
d6:0d:27:ae:94:47:44:56:fd:d3:f1:2b:f8:5a:69:
a6:1f:04:b0:9e:e3:a2:42:ca:b8:b5:6f:94:63:1f:
6d:1d:20:80:9f:5a:a7:bd:bf:89:9c:52:5a:40:71:
c7:a6:19:e0:11:c3:da:6c:2e:d4:28:3f:8a:4e:10:
a9:b0:d2:7b:38:75:5a:50:f7:4b:9f:12:bb:b2:e5:
c0:45:91:7e:74:8e:45:4a:cb:a8:5b:2c:af:fa:27:
56:3d:1c:ff:75:80:07:d8:83:44:2b:58:bf:8e:94:
38:3e:40:55:01:f2:86:32:76:8e:1e:47:80:27:88:
85:be:68:1f:fd:e9:28:ce:d3:c5:6f:4a:04:97:ca:
44:63:ad:ee:33:d2:45:84:5a:1b:5b:b6:72:df:f1:
bb:e1:32:bd:dc:b9:99:e4:37:22:b1:bd:80:cf:48:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:94:50:17:EF:FC:4E:95:D9:A4:B3:4E:0A:0A:53:04:5F:81:35:86
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:30:65:dd:d2:37:a7:8a:89:9f:13:86:95:2e:46:17:19:07:
58:6b:c0:ac:db:59:99:77:f9:72:ef:da:e1:aa:2f:bd:e0:9f:
16:80:91:e2:8f:a8:c5:f7:8a:45:8a:21:2f:18:42:5d:a7:30:
96:62:da:6a:0e:15:1b:8f:77:10:83:40:9b:a0:50:b4:4e:90:
c1:a1:e3:97:3d:65:df:78:36:7b:ef:91:22:cd:44:10:12:34:
ba:75:13:03:76:8e:72:f2:d7:96:03:d5:9a:e4:d0:60:22:09:
88:91:63:e2:be:3d:7a:e5:9b:e7:0f:6d:de:e1:dc:8e:76:96:
9c:fb:7b:6a:cc:11:bd:c0:d1:23:ba:25:89:49:c4:e7:82:4c:
2c:e6:56:ae:09:d6:05:b4:d2:d9:48:1f:7b:dc:f9:12:f8:6c:
34:89:54:77:c9:aa:28:8e:07:26:1e:8b:97:b2:94:27:05:71:
fc:f0:ae:fe:c6:d4:0e:bb:b3:f7:6e:2b:37:c4:9a:6c:86:7c:
41:f0:8f:4c:ae:e9:73:1e:4f:4b:61:f5:23:74:42:7a:48:d6:
4b:ef:9b:68:6f:a3:49:c5:c1:e7:6d:24:73:19:99:2a:81:68:
bb:ac:82:80:73:d4:ea:08:73:1b:7d:ae:8b:34:4d:4e:0a:11:
ee:db:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:42 2025 by rpki-client