Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: IQ/FMj4HAFB5SPHKVcco4V/McASUhbXByikgdBFluS4=
Subject key identifier: 07:16:61:F7:8A:52:66:D8:E5:A6:7F:56:3A:2C:EA:FD:50:EE:F6:09
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0198D4A7B28939DCE187FD88474E79E133E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: EUnJdg/sNR5J0eFELf3vvureyl5Vw7gVsvISYcpu/xc=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b2:89:39:dc:e1:87:fd:88:47:4e:79:e1:33:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=071661f78a5266d8e5a67f563a2ceafd50eef609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:89:3e:4f:fc:c7:5c:6d:4d:68:74:64:21:
a7:25:e2:63:3d:fb:32:6e:e4:1a:c6:27:82:ce:40:
1a:fc:92:f4:52:69:71:0f:fb:75:aa:d0:48:d8:70:
f7:53:ab:ec:ce:10:55:2c:fe:a7:d6:1d:99:3f:e4:
a9:25:49:65:6f:73:a5:37:73:a4:b1:2b:c4:44:9a:
79:88:b0:47:c3:c5:80:c8:4c:a9:0b:7d:7a:f0:3a:
df:88:27:d5:ab:9b:53:6f:52:b1:88:0c:19:7c:b9:
d6:6b:c0:21:85:d0:4b:02:ba:8f:6d:c3:7f:9b:7d:
23:75:d9:0f:dc:27:23:27:7b:72:d8:a6:1f:6c:db:
08:6d:f1:f3:21:2d:f5:92:92:c6:ad:d9:61:e7:e6:
0f:72:42:68:b5:3e:c5:55:88:35:92:b5:ec:9f:a3:
bb:63:80:92:16:7c:30:ac:e3:30:ff:ec:c6:5c:32:
9c:51:1f:de:cf:4f:cc:fa:3b:51:88:8a:9c:1d:c3:
ab:a5:22:c2:90:4b:de:5e:1e:c2:a7:b0:0e:4d:f3:
a0:1b:16:7f:1a:57:04:66:49:bf:f3:30:32:03:3e:
f1:98:6e:12:f7:5f:3b:87:32:af:27:3d:5e:30:6a:
94:05:01:63:29:1a:b9:25:e6:56:0c:d9:e9:94:50:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:61:F7:8A:52:66:D8:E5:A6:7F:56:3A:2C:EA:FD:50:EE:F6:09
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:b0:d7:0a:7d:06:85:24:77:ec:5c:cd:0e:37:1d:ef:a3:
7d:0d:e5:5c:9f:d1:0d:46:4e:56:1f:1a:d1:9d:9f:be:27:08:
1c:62:e1:b4:76:e0:24:c9:b3:57:6c:18:4c:98:40:88:6d:aa:
73:aa:39:a6:0f:62:38:cb:41:11:b6:60:8c:77:4c:58:22:71:
25:53:1f:74:ad:12:5a:fd:b2:84:4a:dc:c9:1a:43:cd:63:e5:
8c:55:ed:8d:9a:f0:75:95:c4:59:bd:b4:a3:34:05:b8:43:9b:
ca:a8:d6:d4:b6:c6:2e:b2:32:3f:64:04:e4:f1:de:cd:19:c3:
1c:07:d2:6f:9c:57:70:a1:06:e1:f6:60:49:21:9d:09:ed:44:
ef:a2:71:69:14:9a:2e:79:3a:24:47:9f:db:b0:a8:33:b6:d2:
b1:74:54:9d:1d:0b:40:de:ac:1f:c7:c0:43:81:f0:a4:ea:72:
d9:b1:c2:83:b8:b3:4d:db:19:7b:92:e9:7a:b9:41:9d:aa:78:
8d:a3:a8:2d:f0:78:cd:ff:38:0e:48:42:71:f3:50:fe:e3:c2:
e0:6c:7e:1c:7d:0e:a9:d7:60:90:68:de:1f:e9:56:45:28:e5:
86:8a:56:e1:10:cc:cf:22:40:f3:bb:86:a9:db:80:9c:73:56:
ed:cf:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:24 2025 by rpki-client