Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 8IC4Npgzmlq84JJeZTPNwLn414eh0Wxxh7e3xgSCCM4=
Subject key identifier: 6B:13:FF:11:F0:E6:55:59:0F:D6:96:DA:92:10:AC:44:24:38:E7:67
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 0198D660F580B2EFC4F2D43A442F9D0DA7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 0317
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: A25fHWTtQfyhyooZLAJQrSdQuLadCQ99FGlZbiC4JWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f5:80:b2:ef:c4:f2:d4:3a:44:2f:9d:0d:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=6b13ff11f0e655590fd696da9210ac442438e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:06:e0:fd:58:46:32:47:45:3c:00:8d:8b:
ed:e9:5c:9b:13:bb:92:aa:4a:05:08:ac:b7:09:45:
54:26:d4:c7:79:23:72:6d:9f:c9:9b:cf:e8:0a:f1:
9f:9d:9a:d3:18:6b:08:db:bf:0c:54:ff:50:c1:9b:
f3:78:29:f0:34:ac:cc:e4:59:d3:03:1d:71:db:28:
ae:dc:1d:4f:f4:13:71:59:0c:61:44:2b:17:e5:b7:
a0:c9:23:7b:47:86:dd:2f:26:46:b6:2c:39:f2:a7:
5b:6c:b2:03:5e:0f:30:aa:47:5c:c5:ae:9f:17:26:
c2:a4:d6:ff:9a:0b:14:d1:dc:8a:6d:b3:11:ac:b7:
17:ce:96:1e:74:dd:1c:20:5a:95:83:cb:93:41:63:
97:09:6e:83:f2:46:5e:2a:75:de:4f:04:d0:1f:0c:
b3:43:d8:27:d7:2a:d6:e5:2d:db:ab:fc:50:1f:ff:
32:8c:70:c6:93:98:0c:10:33:6e:6e:9c:3d:08:89:
ac:a9:a0:c4:4f:09:97:46:b7:e6:38:db:04:82:35:
30:c0:08:30:f6:9c:ee:c1:11:61:8e:73:d2:8d:8c:
e3:dd:f0:94:c8:7f:21:e2:e3:27:e4:af:d1:4d:4d:
3c:10:d8:71:ac:cd:42:f0:12:ac:a1:7b:80:51:dd:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:FF:11:F0:E6:55:59:0F:D6:96:DA:92:10:AC:44:24:38:E7:67
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:93:83:89:d0:32:3e:d4:a9:3e:1d:37:2c:28:7d:0b:c9:7f:
1e:0f:f8:af:98:b4:47:52:08:25:ee:7d:33:c4:c8:c5:a5:84:
35:80:6c:17:0a:89:06:0a:89:37:73:b6:b0:78:b5:16:83:af:
52:cf:a4:0c:c8:80:c6:cf:d9:2a:cf:80:98:f8:4b:6e:5d:ac:
b1:51:c5:06:8c:b6:0d:1a:46:e1:8a:71:fa:e4:5f:b9:0a:94:
be:b6:34:50:14:bc:a4:9f:92:0f:ba:fa:ea:31:7b:8f:e6:84:
32:94:00:36:6e:02:1a:10:95:2b:cb:38:dc:cd:c0:a0:c9:a9:
c2:60:f6:d1:5c:ee:c6:c9:11:97:91:0f:50:e7:2c:79:cb:83:
66:d0:ca:5c:61:da:4d:fa:e1:2c:26:28:63:73:47:70:d8:f5:
e5:4a:88:68:d0:e1:82:69:7f:47:18:ba:20:49:8e:7a:2b:81:
f4:03:75:ff:d3:71:47:6d:c9:04:da:48:c6:a7:ca:17:ed:93:
d7:f8:15:1f:67:c2:28:63:af:3f:8c:7f:2f:7e:5a:1a:6f:ff:
d3:21:01:fa:2a:50:e6:f0:60:ae:50:77:a2:33:b2:60:a9:2b:
65:e0:6e:a6:f5:2a:78:c6:e3:9d:07:53:6f:f0:b5:86:df:9d:
fd:d1:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:21 2025 by rpki-client