Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: d+2qugbygG7UWKYu0U9QdLboTisKr3emsEyMjk3npn4=
Subject key identifier: 03:84:02:D4:14:F0:58:5A:38:3D:D3:35:10:34:75:B9:23:10:CB:2C
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 0198D515AB935FA1DE4929A52A7263282107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: EY8+NUvSCXw7mpC1eTSqkAiv9gAQfvyNm09MzVpZgtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ab:93:5f:a1:de:49:29:a5:2a:72:63:28:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=038402d414f0585a383dd335103475b92310cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:dc:7c:30:6d:2b:0e:61:94:70:30:55:70:
5e:73:79:d1:40:c8:83:ad:b9:c7:0e:8e:e6:4c:c6:
26:34:1c:0c:b7:8c:4b:93:d1:97:c7:dd:aa:5e:4d:
60:2d:59:f4:8d:2f:29:2f:1b:58:77:cc:a2:9a:fc:
2e:51:db:ea:26:dd:a4:47:eb:6d:46:b8:51:37:c9:
40:f1:85:a3:a0:69:59:ce:c1:40:6d:19:ae:14:62:
84:2e:8e:75:18:70:94:df:76:55:76:58:4e:e1:05:
c3:46:fc:92:67:ea:e4:ef:42:99:7e:ca:8b:6e:2f:
d6:53:69:fa:b1:f3:8f:0e:c9:a1:4b:c8:35:5c:d8:
b9:8b:f0:c4:70:24:f3:30:08:ca:5f:f3:f7:74:75:
10:ae:97:72:58:60:00:b5:ef:0c:57:e7:b4:ee:47:
a3:bd:3b:ce:24:05:74:53:61:fd:f8:eb:4e:8f:3c:
0b:4e:3e:d6:16:3c:e8:c8:b3:10:3b:28:50:a6:42:
8d:c2:18:23:d3:1f:ab:68:14:4f:d4:10:32:cf:a7:
42:97:7f:04:a9:7b:6a:9c:31:82:ad:5a:78:dd:52:
f8:c5:6c:e3:b7:28:dc:9e:08:96:4d:7f:f0:aa:a5:
31:a8:a7:3c:11:0a:02:dd:d5:b0:ea:5a:b5:1d:29:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:02:D4:14:F0:58:5A:38:3D:D3:35:10:34:75:B9:23:10:CB:2C
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:41:f2:ad:8f:7d:1f:c6:45:77:2b:77:e2:be:c0:50:04:0e:
bd:f0:0c:98:58:cc:cb:ba:6a:aa:b3:c3:25:d7:9e:4c:f9:32:
b4:f8:01:97:08:b7:a7:57:50:ad:b8:49:bc:3f:45:0e:69:99:
db:1b:70:11:91:5b:7d:29:8a:d6:83:0c:41:0b:73:ad:47:8f:
ee:3f:c2:57:29:84:ee:26:a7:6d:0e:cd:01:2f:3f:09:fe:fc:
1a:da:3c:1a:99:3e:33:c6:42:8f:17:24:a7:e3:0a:c8:5d:d9:
45:c2:34:79:44:a4:5c:ae:e2:6a:13:18:bb:72:09:91:9a:09:
32:3b:d3:05:b9:13:36:ed:14:1f:00:2b:e3:ee:5b:ad:1f:a8:
bd:33:b5:75:23:58:74:78:2f:e4:21:f0:7f:f1:42:44:4b:93:
9d:34:3c:27:6f:a8:5d:ad:29:16:cf:c4:de:d7:6e:ea:8e:b6:
74:b3:8b:c4:4e:df:9a:e0:85:b8:4e:87:05:5f:da:ec:25:87:
62:f0:f3:53:36:f3:56:c4:bf:67:de:49:82:67:25:9a:44:30:
22:ab:63:0e:94:37:6b:a0:3f:5f:b6:05:42:85:37:b4:57:f6:
f9:2b:05:16:44:70:ae:e5:0b:3e:9e:19:0e:83:9b:c4:9e:9c:
e0:41:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:01 2025 by rpki-client