Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: iKEydav8WVEkqwJ+hQsx+rKexlLUnL1VGCw6hK2+x2g=
Subject key identifier: AC:4A:18:5D:71:91:C8:6B:95:63:07:3C:89:47:40:49:D7:84:1C:0E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0198D5BC1DAD053A16D11B6F635E2AFCEDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: 7sgM8jQey0hzU8RbkK0fpr8zuWE.roa (hash: gY/oXRN1rQWRXTj4ibW7nW6LN4SdHlM7BLUYysL1ewo=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: etd5yt0VlgATP+XXr8ulvJ6fatuShpTzD7NNkoxfFBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1d:ad:05:3a:16:d1:1b:6f:63:5e:2a:fc:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=ac4a185d7191c86b9563073c89474049d7841c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:a0:68:ea:e9:1f:3c:ba:e3:81:a7:c9:9c:
2a:1f:10:0f:1a:b2:58:9d:b6:29:a7:e8:c0:39:11:
1b:8e:8a:bf:a6:f5:96:43:2b:2f:65:f9:df:59:b0:
a5:7b:01:0c:48:19:a0:c5:9b:11:08:7c:58:39:7f:
b3:2b:1c:bc:f3:90:77:22:8d:c9:13:fc:f4:cb:94:
3b:6f:f2:a7:b6:97:89:25:f0:d9:d5:fe:22:f1:cd:
7e:79:37:02:8b:fb:4e:20:a3:a2:7c:a9:09:67:4c:
72:da:a1:03:30:b3:23:06:85:f4:e3:59:93:f5:a3:
3b:2c:57:c9:22:3b:34:fe:3f:88:94:06:1b:5a:d7:
93:91:53:1c:e4:23:03:82:2d:48:90:b5:70:35:2f:
18:0a:0a:7e:2f:c0:d7:a7:7f:50:06:1e:15:5d:62:
1f:e4:d4:35:68:1c:83:70:0d:3e:a8:29:0b:05:d4:
05:b2:62:75:bb:e2:ec:20:c6:f2:8b:75:71:72:d3:
d3:24:6f:ac:57:de:cb:e0:a4:37:ba:67:d4:c2:9f:
01:39:e7:b3:d5:7c:e0:6d:16:09:c2:3f:72:2e:39:
d9:1f:c8:7c:ce:cd:43:34:36:49:f3:7e:5c:52:7b:
28:2e:d6:c2:6b:6b:9c:bb:e3:ff:71:08:26:0c:38:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:18:5D:71:91:C8:6B:95:63:07:3C:89:47:40:49:D7:84:1C:0E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e0:4f:50:92:ee:8a:94:5a:f4:36:85:4e:cc:3a:cb:ad:6f:
ae:35:fe:28:8c:11:ed:d0:99:77:a7:76:08:d6:bf:06:35:5e:
5e:82:84:ee:b5:d3:c7:88:db:92:2b:27:44:97:7b:47:fe:a6:
a0:a9:2a:c3:75:d0:4c:ec:81:9d:74:21:f1:23:da:a6:16:89:
f3:b2:11:50:52:2d:63:d7:79:4d:4d:87:38:7e:53:98:d3:9f:
70:08:29:db:93:3a:d5:b9:d2:7d:22:77:c0:0b:d4:19:87:7e:
ac:83:56:9e:f1:a6:da:c8:e5:16:69:d2:15:52:f2:3f:44:d8:
17:b7:e3:71:a5:f8:fb:ea:12:53:21:e8:2f:55:83:97:3e:2b:
af:e3:e3:f1:37:36:65:aa:48:d3:52:2d:d8:fa:52:91:5d:7e:
b2:90:30:06:7b:02:7b:dc:c1:ad:cc:45:35:7d:50:2d:ca:8b:
a5:21:88:3b:8a:eb:b0:a4:ee:e6:4f:0f:b7:3d:d7:74:97:b5:
93:19:6a:67:c1:8e:2e:67:63:2c:da:d2:3a:76:67:c2:2a:5b:
ae:bc:01:23:35:a4:d3:78:ad:e7:d5:9f:32:90:6d:90:be:d6:
12:02:36:37:a7:b5:74:98:44:8d:df:38:06:a0:12:f3:3d:ed:
cf:72:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:22 2025 by rpki-client