Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: PyKQN4n1JuASO9XXxj+F+NhK4+J8RwfSp3KcOE3wp7I=
Subject key identifier: FE:28:D6:60:71:BD:47:28:9D:CF:03:1F:4D:A4:9A:DB:1B:18:82:96
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0198D6CDFF8318521EF09D4C9D3FAF897D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 061B
Signing time: Sat 23 Aug 2025 12:01:21 +0000
Manifest this update: Sat 23 Aug 2025 12:01:21 +0000
Manifest next update: Sun 24 Aug 2025 12:01:21 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: eLLl7L059O/FIwSCWMumxKsrJuhVO2EF6xIVqOSewRE=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ff:83:18:52:1e:f0:9d:4c:9d:3f:af:89:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Aug 23 12:01:21 2025 GMT
Not After : Aug 24 12:01:21 2025 GMT
Subject: CN=fe28d66071bd47289dcf031f4da49adb1b188296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:4c:22:ee:55:1e:71:fa:4e:9e:d5:94:17:
20:4f:10:b2:f7:23:f3:c5:a9:0f:d1:cf:73:fd:73:
4b:85:9a:b3:56:64:52:8e:4a:5f:31:f9:9a:48:67:
0a:91:04:36:9b:4e:9f:88:3c:45:21:91:b2:9c:02:
39:c9:e4:f9:0c:ca:8e:77:f4:01:e2:f6:06:7b:77:
dc:a6:ae:30:5c:65:89:e9:b7:fb:45:8a:05:3d:3b:
78:ed:44:91:35:8d:6a:92:1d:5c:f7:96:c2:14:ae:
b4:7e:61:ad:04:9a:d0:65:ed:3a:9d:0f:30:ef:b0:
72:db:97:bd:2e:f3:8d:3e:d3:bd:48:b2:f4:4c:12:
7c:f9:0d:e0:26:7b:cb:2a:91:01:98:22:e0:a7:d2:
f4:12:dd:15:b2:b6:ec:74:92:54:9d:f6:09:fa:24:
9a:fd:bb:3b:ac:bc:03:80:eb:2e:86:7d:34:44:6b:
0c:b5:6e:c5:eb:4b:81:b1:f4:92:33:81:a6:79:82:
58:04:0a:d2:ff:9f:57:a1:3e:0c:46:8f:aa:12:84:
0b:f7:35:a4:10:b1:b3:a4:a8:31:bf:8a:dd:95:4e:
29:19:b9:d3:40:41:cd:9b:12:d2:cc:53:42:d9:91:
5e:fe:0e:e1:fe:6d:a5:61:8c:41:c7:5e:e0:7d:52:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:D6:60:71:BD:47:28:9D:CF:03:1F:4D:A4:9A:DB:1B:18:82:96
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2c:04:37:2f:56:55:47:7e:48:8f:67:84:73:71:72:7c:31:
30:3d:41:27:d1:d0:3b:9f:30:06:50:c3:43:e5:f0:1c:11:c8:
bb:8b:4c:8c:16:56:d5:cf:8d:8e:0e:6b:c0:1c:ce:a8:c9:22:
9c:aa:41:97:7a:b5:e4:57:c4:6e:3b:7f:20:0b:24:f7:ed:bd:
5f:44:f7:43:ed:7f:7a:34:1d:ea:8a:64:56:ac:45:c9:0b:da:
74:4d:be:ed:a8:fa:a2:da:45:fd:95:88:00:d5:f7:77:e4:86:
2b:7b:ba:b6:6a:e8:6a:a6:5a:38:a4:ab:47:d8:74:05:7d:62:
34:a4:5f:3f:5a:f6:4e:03:6e:ca:cf:58:f2:12:83:d0:44:b8:
74:28:ca:1e:0e:b8:22:92:ff:c8:b4:bf:10:ee:42:58:27:30:
6a:6d:19:f3:5f:c8:a9:2f:2e:06:de:60:e6:7b:4a:a3:27:42:
da:d0:5f:34:61:d0:a0:71:71:b4:5a:76:f1:4e:f8:cb:5b:93:
f3:ad:34:11:58:da:7f:54:60:ff:23:dc:33:1d:ff:a2:9e:78:
66:d1:a2:c9:8b:69:91:e1:60:4a:a8:42:e6:6c:ff:ac:44:11:
6c:04:30:33:98:12:d8:d7:20:17:3a:af:0a:66:15:df:21:46:
b5:13:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:41 2025 by rpki-client