Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: VwM5ibl1f/1DNKh2KXjILggZx/gbLY4YFC+duuR7x9I=
Subject key identifier: A9:97:D2:42:08:F4:98:56:20:37:9D:17:23:C3:3A:13:3F:40:C4:A3
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 0198D73B2EA3E4EDF62422A48CD363DAD04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 0490
Signing time: Sat 23 Aug 2025 14:00:36 +0000
Manifest this update: Sat 23 Aug 2025 14:00:36 +0000
Manifest next update: Sun 24 Aug 2025 14:00:36 +0000
Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: 57q8R7eXH5Nu+zwav5+G7QOjfEMNn76Jnx4RYYXW+VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:2e:a3:e4:ed:f6:24:22:a4:8c:d3:63:da:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Aug 23 14:00:36 2025 GMT
Not After : Aug 24 14:00:36 2025 GMT
Subject: CN=a997d24208f4985620379d1723c33a133f40c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:8f:52:8f:38:a5:c8:07:36:3f:e0:83:d4:
40:b7:f4:4e:78:dd:27:38:78:54:ca:d0:04:fb:ad:
f2:0f:69:02:69:6b:48:6d:d4:23:94:2b:ae:f9:b1:
52:b1:a9:6d:7d:c9:21:78:3b:1f:33:a0:b1:7b:e1:
b8:c3:5a:86:11:63:e0:0d:56:b9:e8:42:a4:1c:65:
fb:d7:ef:c3:3c:a7:27:d8:84:e4:4a:4a:87:14:d1:
e2:a5:92:e9:cf:e1:48:81:16:25:60:47:10:1a:9f:
fc:5c:b4:40:12:0a:e1:4a:73:68:0c:9f:05:d1:d5:
3b:f5:d3:7d:8e:58:91:5d:e6:87:89:75:ac:74:eb:
c3:92:6f:bd:2b:40:1f:ae:8e:2b:b8:0d:2e:14:ff:
56:c5:31:37:5e:71:78:a1:73:83:56:8d:55:30:7d:
70:8e:84:28:9b:ef:ae:04:7f:bc:d5:e2:5e:55:bd:
83:0b:20:bf:73:d4:d8:2e:32:07:cf:8b:29:d9:e6:
aa:75:d0:4b:b9:40:d6:ba:a4:2b:fc:36:49:2e:10:
e2:8a:57:29:73:0a:33:83:09:99:e4:f2:df:0e:75:
d5:d2:0f:37:20:49:d9:35:ac:27:01:78:1f:7b:80:
64:cc:11:36:67:8e:6b:b0:da:c1:c1:14:51:98:a7:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:D2:42:08:F4:98:56:20:37:9D:17:23:C3:3A:13:3F:40:C4:A3
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0b:bf:b8:63:04:7c:3b:25:49:d3:66:f6:96:2f:e5:0b:e8:
5f:14:79:c7:33:a7:51:af:33:4e:04:fc:12:90:19:c0:95:33:
72:d2:14:87:7b:89:76:34:b5:d4:d7:66:a4:2d:27:1f:51:6d:
04:f0:f2:8f:1a:65:37:d0:09:55:e6:de:c6:59:0c:69:16:24:
89:ee:2b:65:5e:1f:91:6d:20:5e:6d:fa:41:11:c7:5c:76:56:
cb:f7:cb:ee:bf:5b:d2:77:d9:ca:c7:44:e3:46:c7:cc:62:85:
39:87:00:1a:e9:fc:28:1c:c3:5d:b3:18:70:43:fb:d3:46:74:
3a:e1:c6:c4:8c:71:d5:8f:79:26:c3:cf:8a:40:a5:7f:29:13:
58:eb:46:8c:3d:5f:52:a3:29:66:31:d2:cb:7e:3a:97:0a:45:
90:18:18:bd:e7:b9:d0:80:3f:86:bc:45:82:fd:6f:fa:64:be:
ab:e8:d6:2f:55:2a:5a:66:3e:33:24:be:d6:77:5c:d4:42:08:
dd:31:c7:fd:83:0a:fc:4a:35:23:e1:88:4f:a1:4c:4e:db:8c:
38:18:78:6f:0f:af:d7:3c:44:1d:bd:9c:36:e7:0c:88:d8:a2:
e8:5e:ee:98:f9:7a:30:af:65:55:97:be:b6:0b:bd:92:3c:02:
49:94:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:08:37 2025 by rpki-client