Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: jsojHAGjv77UoehkuQ/w69aIyt3MizWHPqf0BvemEsU=
Subject key identifier: C6:1B:E2:16:A6:1C:F6:56:A2:35:1E:1F:1E:76:67:14:76:86:0B:C6
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 0198D5BBF565FF6833E8ED568A3B4494D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1399
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: J53H+lSwdmJuC7RHteS+8jqQxizOojXX2Vr0Pvy+6qM=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f5:65:ff:68:33:e8:ed:56:8a:3b:44:94:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=c61be216a61cf656a2351e1f1e76671476860bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:9d:c7:22:c9:b2:9b:b4:ff:df:a5:16:65:
e0:ed:c3:d0:08:0c:2b:2b:87:ed:33:8e:34:de:1d:
c9:a8:96:4b:62:c1:17:e8:90:4c:b5:a9:82:2c:d8:
63:ae:60:a4:ca:8d:56:e4:d4:be:74:a0:2f:e6:51:
a4:24:6e:d3:48:15:79:71:46:93:de:33:78:48:66:
ac:74:e8:df:ce:cf:5a:44:1b:b8:7d:fb:b6:6a:3d:
54:f3:02:22:cc:ba:31:6a:95:69:71:1e:d2:60:5c:
88:b2:21:15:40:d5:62:5b:c5:81:fb:2c:f7:eb:ef:
55:8a:43:44:ad:60:23:b8:ee:65:93:85:3a:66:8d:
39:2b:a7:b7:7c:94:5f:3e:d6:94:aa:f5:0a:f7:79:
23:48:78:05:56:0d:51:e6:7d:30:d5:91:a9:dc:a4:
6e:20:87:67:a4:c5:45:5d:a1:6d:c1:54:63:a2:12:
3e:38:5e:a4:6e:2d:a7:52:f5:1a:de:53:67:f1:ef:
b7:5a:f8:48:23:aa:92:85:0d:cc:c6:64:8e:c7:96:
ef:8e:2f:43:59:4f:74:8f:13:c9:62:ee:9e:ab:1a:
b7:36:0f:d1:21:59:dd:5c:5b:21:42:c7:93:16:27:
38:54:2e:1b:27:39:06:75:1a:d7:8b:2c:99:91:50:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:E2:16:A6:1C:F6:56:A2:35:1E:1F:1E:76:67:14:76:86:0B:C6
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:06:a2:44:88:9f:0a:42:30:39:66:95:81:e0:2c:59:4c:
0f:74:1b:c6:ff:fd:19:e9:25:65:0f:3c:5e:8d:a4:e4:cc:99:
be:fd:f3:67:54:73:00:c5:de:49:7b:a6:f6:b5:23:89:7b:53:
22:79:63:6b:41:30:02:60:c8:74:3d:42:cc:58:a3:d7:fe:b5:
72:f8:91:e8:57:4c:ae:03:e9:56:97:3c:d2:45:a8:0d:8c:42:
e5:41:f5:cf:c1:73:8b:7f:17:9c:05:18:ae:87:47:98:85:74:
bf:ce:ba:14:27:95:15:d3:fc:63:cf:e1:59:b1:a2:2f:7d:fe:
09:17:a2:b4:22:e4:73:77:ca:9d:a1:8e:89:66:2f:20:6a:21:
6d:d9:7c:35:b7:87:9b:ce:4e:22:1b:6a:9c:b7:eb:85:90:ed:
b8:e1:c4:c9:68:fd:6c:3f:47:da:b3:b2:f8:f1:d0:7f:a9:a7:
14:c4:73:b6:7b:1e:7a:20:51:13:a3:bc:5c:0d:85:a7:bd:ea:
cf:53:e5:47:55:1b:de:1e:70:d9:80:ba:51:f6:f1:c4:08:1c:
80:8e:c3:d7:22:4c:cd:00:3f:b4:39:65:b3:a9:1b:17:29:51:
00:47:9f:c3:da:4d:62:2d:cb:d8:a3:78:9f:d9:13:ef:0b:32:
c0:d0:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:29 2025 by rpki-client