Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: QU8lWCPCoEguXKemoqBHM9G52iCXdNyOQO/OXXn4BLA=
Subject key identifier: A2:70:79:05:0D:6A:0C:26:3E:7B:C2:71:16:AC:95:61:A3:4D:20:7F
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 0198D51575E249519ECD0FAC43F1BE436DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: AWrci4x1iMhhuyFdeewrBD/NAuaKUQv5n6G5MOrVREI=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:75:e2:49:51:9e:cd:0f:ac:43:f1:be:43:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=a27079050d6a0c263e7bc27116ac9561a34d207f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:7c:dd:cd:fd:f9:67:b7:58:bf:58:fe:78:
19:4f:19:a4:71:71:5b:51:5c:6f:7a:c8:62:71:36:
36:9d:bc:ca:e5:77:a6:69:84:0c:da:ef:09:50:10:
08:df:f6:8c:d2:2b:2c:09:68:e2:39:13:ad:d6:bd:
c5:87:ae:6d:cb:72:d9:e9:a0:81:5d:63:2b:12:72:
da:45:16:46:e3:de:24:89:71:0c:30:45:bd:27:a5:
6b:d2:97:d4:4e:17:92:5d:e0:9d:27:4f:4d:30:8b:
12:92:ae:45:fb:fc:4a:70:92:37:db:2b:ff:b1:dc:
6c:7e:f2:ec:6d:59:89:d7:14:cd:6b:cd:57:b3:df:
94:c7:27:35:76:30:be:10:8d:be:37:fd:c3:c6:66:
d0:2d:0d:a4:14:ff:44:d4:9b:3a:2b:9f:51:0e:96:
9e:94:9f:02:13:b1:a7:69:7e:06:cd:81:61:52:25:
f6:82:8c:e4:99:59:8c:1b:6a:67:02:0f:17:ba:af:
73:22:8c:c2:4b:c4:cd:6f:21:b0:ad:79:01:50:a4:
37:6e:36:9c:80:4a:a9:44:0b:45:77:44:79:8f:e1:
3d:87:db:a7:90:52:8d:88:0d:b0:ae:74:86:45:6b:
ff:97:62:00:92:42:5c:2b:99:f3:82:41:78:9e:c4:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:79:05:0D:6A:0C:26:3E:7B:C2:71:16:AC:95:61:A3:4D:20:7F
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:19:2d:21:54:21:99:dd:b8:59:87:f3:87:64:be:a6:c1:
7d:d2:8f:14:b9:ad:f6:ef:b2:70:af:e7:62:9f:56:32:5d:a2:
bf:b9:7a:9e:2e:8a:65:6b:74:12:ae:f1:3b:0d:50:38:e3:3f:
47:1d:74:d7:81:63:13:e3:9d:7c:fb:3a:b8:cb:f9:53:56:28:
f6:f7:74:7f:68:ed:fd:22:97:2f:ee:f4:5e:30:cb:6e:f6:17:
a9:81:9c:de:6d:5f:88:94:7a:45:f8:f2:ca:cc:4f:7d:9c:56:
36:09:92:6e:4c:41:f9:f3:7a:72:5c:52:24:bd:b8:a5:74:38:
fc:73:fd:65:98:bc:8f:e5:3e:fb:22:5a:ed:78:bd:c9:a5:8a:
f7:82:73:21:7a:92:3c:5b:a2:5e:6c:52:d1:e0:01:2b:b2:3e:
76:5e:98:74:25:6b:8e:3a:b1:6b:eb:ac:ea:b4:0f:0a:be:e5:
ea:ca:a5:f7:0e:4a:d4:e8:89:0d:d6:12:74:ab:29:a8:ab:1d:
f7:48:43:4d:5c:a2:8c:f7:74:73:6a:d9:10:c8:6b:da:89:58:
29:6b:9e:1d:c5:ff:64:f9:98:9e:1b:1f:d5:d6:6c:7f:79:f4:
0e:d3:20:73:5f:a8:b5:5e:c4:b1:d3:37:36:ce:ba:97:90:85:
01:6a:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:47 2025 by rpki-client