Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: l409FUg/vIQ+lWaM7HkH6vAJLKPmOuaferttqhNSB4o=
Subject key identifier: F3:51:BB:DD:09:73:69:B1:A7:9C:B3:0E:E4:4A:EF:18:5D:8A:3E:7B
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 0198D583DB5EBDF0F4C43408556FCEB68246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0199
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: 6zk7Y8RBfE8u8MHXDYwLKJKU5UXjfJqp0UP9ZR+OXkc=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:db:5e:bd:f0:f4:c4:34:08:55:6f:ce:b6:82:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=f351bbdd097369b1a79cb30ee44aef185d8a3e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:70:71:95:86:cb:d1:3b:ed:71:c3:69:01:
30:0e:3b:51:ea:40:c4:8e:29:0c:cb:6a:6f:df:d0:
3d:0d:08:92:77:d4:46:39:fb:4c:cc:64:ee:2a:20:
c2:26:37:58:f5:40:43:9f:0e:2d:ea:c1:0f:ab:cb:
8b:f2:09:7b:b4:a9:8e:3c:fd:23:f3:86:34:3f:5b:
bb:8d:0b:ef:7b:09:76:f1:13:ac:f6:ca:bf:c3:18:
43:86:c0:0f:b4:b0:7c:9a:80:1a:8b:26:2b:16:c4:
82:45:60:eb:d2:8b:11:aa:b9:20:c9:95:9e:9d:f7:
2a:18:3b:8b:d9:2d:66:e7:92:34:8c:43:66:ff:7e:
da:dc:6c:22:d9:86:4c:1e:57:53:7e:65:74:4b:39:
5b:29:7a:49:2c:b6:84:99:51:ee:6f:92:e5:7b:2f:
2f:2f:3e:5f:04:bc:6d:d2:65:f3:cd:5e:40:b5:df:
55:0e:4e:52:6f:51:53:54:56:3b:b0:c4:d6:26:0e:
1f:16:cc:ad:48:26:35:cc:2b:f4:c2:21:bf:7e:cb:
79:ea:27:8d:40:48:ca:92:68:f8:c1:6c:52:52:b3:
9f:2e:d3:09:6f:88:33:e0:e3:2a:c4:6c:3f:8b:f5:
6a:cb:32:83:38:7e:ff:eb:e4:93:46:1c:d5:d9:34:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:BB:DD:09:73:69:B1:A7:9C:B3:0E:E4:4A:EF:18:5D:8A:3E:7B
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:d2:04:d2:07:2e:96:36:de:50:0a:04:17:37:d6:e7:bf:
f9:e5:8b:fa:41:9d:34:45:7a:66:72:01:f0:af:45:87:ab:49:
b8:ed:b9:8d:68:49:b1:81:ab:ff:85:97:97:52:ab:6b:4e:84:
ce:53:d9:7b:5a:64:d7:fb:e3:12:20:87:4d:5c:3c:c0:b6:36:
f3:40:1d:e7:0e:21:2e:e5:d2:74:65:31:c3:b4:76:d4:dc:02:
15:87:bb:d3:ca:c1:0a:87:3c:42:ed:6c:0b:00:cf:e7:10:92:
97:22:91:f6:61:51:97:c5:c0:63:0b:d2:f8:c1:1e:ae:aa:ca:
57:44:b9:95:4c:4e:94:a2:ce:ec:13:b2:05:3c:75:b7:4d:7f:
fb:99:a8:78:6f:b5:cb:d9:a5:92:a2:a8:60:4f:aa:ce:b2:59:
f8:89:f1:c8:3b:b4:b5:73:47:08:de:86:bf:fb:2f:c5:57:87:
41:23:7a:f4:12:81:56:ea:29:2a:5a:97:57:bb:f0:74:b6:73:
80:e6:e2:3d:ec:96:0a:9b:2a:84:f7:ec:ff:c4:f0:b4:f6:18:
29:e5:46:77:ae:e7:5d:2b:1c:8d:c0:2f:f2:6b:92:50:89:40:
02:de:3e:f9:1a:3d:a6:4b:0d:e5:cb:bc:9b:fd:33:0d:37:c1:
3a:fa:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:49 2025 by rpki-client