Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: rxUwIMze/CCpZEA1zur1F51pLYuRvYfG2lsr0NynvxQ=
Subject key identifier: 0D:77:B4:FA:6A:F5:46:06:B9:DC:10:54:20:53:BE:95:82:42:2D:1A
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 0198D583B3DB43824C37223D7D5D76E45740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
2: ft2mxf9aaNoul-AnIThMbBr-lps.roa (hash: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: e+BU+AoNT3qqU75LHPCHafJu3F6vgBZNLrfjtIjI3nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:db:43:82:4c:37:22:3d:7d:5d:76:e4:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=0d77b4fa6af54606b9dc10542053be9582422d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:ae:6c:30:db:be:98:b7:9a:16:54:17:1a:
f6:9d:39:21:96:e9:26:d2:12:3d:3b:eb:3e:33:6e:
0a:e2:93:93:c7:cf:e2:ac:41:af:0d:d8:4d:39:92:
9a:e4:93:55:d6:5e:de:de:c4:96:6d:2c:e7:b1:5f:
b0:c6:10:48:e6:2f:59:fa:49:1e:9b:7a:bc:d9:c6:
af:54:45:3c:fe:39:0c:43:69:72:73:37:70:f0:c0:
cb:45:ac:17:d9:cf:b0:94:73:e3:e1:00:dc:71:4e:
ca:c3:a9:2b:cf:7f:7f:24:8b:d8:8e:ff:19:a2:3e:
3f:59:e7:0e:c0:8f:bb:67:89:43:3b:38:26:83:aa:
b4:33:4f:2c:f6:0f:65:94:3f:6d:15:9c:41:64:df:
79:64:52:36:80:1f:1c:7a:b3:81:1f:90:a1:f8:90:
a5:ac:f0:6e:91:92:d6:4f:6c:88:3f:81:1f:69:14:
db:17:a8:c3:72:a6:3a:20:54:a1:7f:31:41:21:d8:
bf:cd:0f:9b:26:e6:cf:71:92:d7:9c:38:98:d2:3a:
0b:74:66:e5:2f:f9:a7:db:ad:c4:ec:5a:c6:3d:06:
b9:fc:d7:5c:0c:1a:72:eb:58:14:42:87:a5:41:a0:
ad:bd:f4:9f:29:b8:7c:4a:93:4f:cb:38:3c:60:d6:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:B4:FA:6A:F5:46:06:B9:DC:10:54:20:53:BE:95:82:42:2D:1A
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:be:7d:a4:ba:b4:49:d0:56:ab:2d:6a:15:ee:f3:d0:65:
f2:ec:7d:3c:f6:8a:db:98:d8:6c:b6:d0:2a:6d:bd:66:f4:0b:
60:b3:59:70:2a:97:96:76:5f:43:fb:13:82:68:8c:ff:d2:6a:
71:69:be:dd:97:9d:26:ee:f9:3c:6e:3e:d3:4e:c0:21:c2:77:
71:a8:8e:02:8e:ee:a7:2f:5e:35:0c:d2:44:32:11:57:42:33:
85:b4:ee:92:1e:f7:40:15:46:1c:04:24:9f:02:7e:de:de:f5:
32:7c:cb:71:5e:b8:bc:24:b6:42:fa:a8:14:ca:5d:73:bc:e8:
fd:f8:83:4d:7e:98:b4:36:b3:23:fa:17:42:32:f2:01:8f:07:
fd:ea:7b:bd:df:73:a0:9d:b1:0c:82:ee:55:e8:77:d8:03:56:
0f:a8:1a:d5:ea:7a:2b:a5:ac:d1:2c:4e:4e:a4:62:f8:2c:52:
b0:57:85:7d:05:1e:37:ea:a2:bd:63:4a:98:45:84:a3:8c:46:
f8:ad:dd:bb:2b:7f:65:17:e6:da:6a:52:b8:32:77:63:8a:22:
43:25:7f:46:38:ce:88:f1:dd:93:c9:a3:4b:8f:24:09:20:fa:
e6:f7:7c:69:11:96:49:05:53:ea:dc:7f:e2:f9:60:26:9c:ec:
38:41:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:15 2025 by rpki-client