
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: zc2a8aSrfFgZOCluJT43C/3BGX6ZGAwnLUJPNoNtJpg=
Subject key identifier: D2:6D:78:9B:71:07:71:12:94:19:B0:AF:3A:3D:EB:C4:04:00:00:88
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0198D5BC36941D1760A5251191A01F2148C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0DA4
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: b8tspbZI3/kEMV4irb0pcvV1HrRYe0tCvy2EPXOpMU8=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:36:94:1d:17:60:a5:25:11:91:a0:1f:21:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=d26d789b710771129419b0af3a3debc404000088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:cb:af:08:23:66:9c:c1:94:96:8c:c5:79:
6e:d7:f5:3a:48:f3:c1:a7:ef:64:08:5e:2c:f8:9f:
3e:62:3a:d3:12:6f:7d:d8:bf:b0:c2:34:ae:d1:3b:
e7:f6:0f:f5:2b:f5:d6:34:13:33:f7:66:3f:9b:ad:
dc:f6:fc:ae:67:25:3a:f9:39:f8:fe:51:0f:eb:b4:
7b:2b:59:55:97:8b:0b:9f:4f:da:16:cb:cc:15:fb:
15:2f:bd:2c:7a:78:52:1d:76:bd:7d:94:60:c9:7e:
47:22:b9:1c:b0:e6:4e:4d:f8:1a:ec:17:6a:97:dd:
f6:28:4f:10:29:f6:b6:35:69:0b:7a:dc:ef:9a:fe:
9c:d3:ac:0f:99:98:0d:ed:50:28:fe:39:80:df:ac:
23:f2:06:7c:fc:41:5a:17:2f:66:87:13:37:3c:63:
e0:9c:84:5c:df:32:df:bd:c3:60:be:28:92:bc:d4:
f4:99:45:20:6e:61:f4:14:f2:28:dd:81:eb:ad:1e:
14:7c:f5:b3:58:ca:df:61:fa:03:62:cc:6d:2a:44:
22:4b:a4:1d:c2:16:83:c7:75:ab:c2:ef:49:84:7b:
eb:66:99:fc:6a:f1:ad:d3:6e:b1:da:67:44:1c:6f:
ad:02:c2:ed:69:4a:84:f3:9b:f5:86:f8:50:45:2d:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:78:9B:71:07:71:12:94:19:B0:AF:3A:3D:EB:C4:04:00:00:88
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:61:03:2d:f2:39:95:38:dc:14:b5:1b:c3:49:95:fb:5c:
84:74:ad:1b:18:80:35:c0:cd:3a:f7:e0:4c:65:95:bb:f3:03:
5f:dd:63:d3:67:b5:8b:b4:bb:d6:ce:20:49:69:8e:3c:3c:8f:
df:3b:c9:ef:71:d4:6f:ce:f2:a7:38:c1:50:25:53:d6:03:e3:
97:0a:2e:2b:55:c7:e7:c2:aa:30:a6:bc:5f:a7:27:8f:18:92:
67:3f:78:5f:28:d4:f6:46:23:6a:6f:f5:7e:00:d9:ba:98:8a:
41:52:72:6b:72:14:7f:59:e8:f9:2d:a1:53:c0:26:0c:a9:40:
41:f7:57:47:f5:bc:7a:70:e7:84:c4:00:81:6e:6a:6d:66:3c:
23:4f:40:3c:ef:50:86:17:50:23:8e:92:f4:d8:ac:d3:7a:5d:
a4:27:7d:a5:45:53:bb:bf:35:51:dd:69:b9:76:e4:71:04:bc:
1d:23:50:51:26:32:a1:f3:b4:90:d0:96:4f:63:fa:bb:cd:23:
e7:a8:84:bc:cb:a2:63:27:9e:8b:9a:7c:b4:8e:ec:87:94:fb:
e3:fd:49:7b:01:54:ad:bb:ef:81:30:f1:45:67:44:56:f8:a7:
70:13:14:0f:2f:3f:8e:d9:db:1e:9e:c4:a8:24:28:29:d3:91:
d7:24:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:33 2025 by rpki-client