Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: 9Gr7vOn4nY/NsoPY4dOjjF0W0gM7HMaoqUMH9LZj7kY=
Subject key identifier: 1D:96:72:8D:E7:75:C3:11:98:AB:A5:D1:D5:CF:28:4B:FF:46:1D:21
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 0198D473A28068062ED40BBD0508F8D263D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0E15
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: 4OE8p4kOHQs6FJ7Lnf9Qj5AFrZlhVuDMPdtRvf+phw0=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a2:80:68:06:2e:d4:0b:bd:05:08:f8:d2:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=1d96728de775c31198aba5d1d5cf284bff461d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:d2:59:27:75:74:d8:fa:1f:1c:ba:b1:c8:
e9:4d:7f:59:8f:00:e5:0c:35:f0:78:eb:da:2b:94:
ed:7d:ac:9f:52:a5:ab:6a:e5:5d:ea:10:1f:fb:53:
09:7a:3d:cd:49:4a:9e:0d:98:06:d7:38:65:af:f3:
b8:c2:17:e2:81:5c:57:df:b7:91:88:a2:c1:11:92:
f7:75:20:2e:65:98:61:18:69:18:e6:d1:38:7b:53:
23:b0:45:f4:79:94:51:d1:43:7d:ea:be:e7:8a:42:
cf:64:10:b9:3a:22:d3:87:25:de:b2:d6:10:f0:bf:
b8:af:62:17:a5:f1:36:d2:e7:9c:89:d9:fd:c3:c2:
fb:fe:25:9a:51:dc:b7:15:ec:dc:ad:d4:3a:a3:54:
07:57:05:53:79:c7:e7:33:62:35:74:09:f2:af:f3:
c1:4d:f6:06:df:fd:d9:e3:65:03:8e:b7:d5:77:62:
5b:52:0b:41:57:6f:ec:49:81:98:2b:0c:bf:0c:93:
fd:5f:4d:87:71:80:68:7e:44:e3:ba:5b:e9:81:7a:
82:7b:49:f3:1f:37:f1:5b:be:c8:34:a8:02:99:e3:
f9:54:47:7f:15:eb:f5:fe:56:d9:36:5e:1a:c5:b3:
1a:1d:e8:02:89:5d:96:75:95:8a:61:b4:bc:ec:5c:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:72:8D:E7:75:C3:11:98:AB:A5:D1:D5:CF:28:4B:FF:46:1D:21
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ca:69:c1:ac:ca:7a:d7:b6:f1:c8:6c:00:f2:06:18:db:bd:
83:45:03:f3:5f:a6:68:e0:2b:92:3d:2d:09:a6:eb:9e:e6:4c:
f8:a0:23:73:e7:77:c5:41:44:e8:48:80:83:ca:e4:fa:4a:c5:
ac:76:8c:30:47:1a:77:c3:23:8b:03:ac:ae:60:c8:a6:4f:b4:
0e:82:7b:1c:26:ad:f3:92:c5:cd:d3:2d:98:45:18:3d:16:25:
19:1a:17:2b:c1:6f:4f:e0:58:37:68:6d:de:80:41:9a:46:2b:
4a:d9:b3:0c:59:06:d9:82:1c:1e:1b:cc:5f:6c:9f:f7:36:df:
96:41:db:40:a5:15:a0:75:5e:62:cf:f3:1f:cf:61:e2:5f:f5:
88:62:74:26:3a:c6:c3:ad:fb:6a:de:78:8c:0a:8e:6b:8c:ff:
32:71:32:2d:77:a5:65:17:d6:be:68:15:7d:c2:2b:b3:a5:71:
36:29:f2:17:20:ef:9b:59:d5:d3:02:b5:68:d5:1a:b3:44:70:
91:50:b7:e3:e1:e4:ce:e0:14:84:84:50:d0:cb:80:2c:d5:23:
e9:ec:ce:2f:37:d7:81:ca:24:ab:77:11:88:86:f1:ef:c5:24:
6e:86:b7:31:7f:32:2f:0a:c5:60:b3:64:1c:1f:b0:2d:6c:02:
cd:4b:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:25 2025 by rpki-client