Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: vPrrLb0rGORrSMa4zquM57eA5APav22MRLkRBRIVGS4=
Subject key identifier: AA:D4:CE:E7:2C:4D:3A:E8:72:99:1B:B3:F6:6D:63:F7:8E:B7:AD:BF
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 0198D6609E6C67584154DA693ECB4FEE163E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: Vgghz4tvBK+8dAFdGV7QP9Op6rpSfHW2ds5lnegXIBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9e:6c:67:58:41:54:da:69:3e:cb:4f:ee:16:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=aad4cee72c4d3ae872991bb3f66d63f78eb7adbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:8f:88:db:42:51:73:1b:97:d2:7c:d1:7d:
a5:9d:02:7e:f3:f5:7b:00:72:44:f6:b1:07:dd:a3:
18:d7:a3:6a:fe:ea:08:2e:5b:8e:c8:cd:4d:f2:17:
9c:5f:24:c3:21:72:1e:b2:e0:a9:cc:49:bc:47:29:
e0:7e:bf:78:48:7e:f5:c9:ba:5e:6f:a2:2b:b3:b1:
9b:79:b5:19:87:62:32:60:e1:d2:3e:ca:8e:90:4d:
f1:c2:84:71:b6:60:20:db:7f:0e:98:b5:5e:a2:5e:
63:6f:48:1a:57:59:19:eb:37:4e:61:0b:34:45:54:
fe:aa:47:86:f5:32:26:e2:14:d1:79:46:3d:77:98:
9d:4e:ee:00:b6:46:a9:3d:f3:a8:5b:83:df:c2:47:
ab:2e:1b:21:a8:31:cc:50:49:77:2b:53:d2:0e:4a:
cd:3d:a5:45:d4:b4:01:d4:4f:1d:f0:d5:8b:20:94:
f6:14:87:3a:eb:25:3b:d6:a0:f4:1e:7d:1d:cf:76:
51:f2:e7:15:3d:e6:6c:8a:40:7f:b5:cc:ed:0f:ff:
9e:c7:64:9f:d9:54:b5:77:55:fb:62:7d:a8:b4:95:
fa:ec:32:7c:69:e6:38:37:f4:3f:cc:a9:ba:c8:20:
b8:66:a7:7f:53:0f:dc:99:8e:84:9a:04:ff:ec:1b:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:CE:E7:2C:4D:3A:E8:72:99:1B:B3:F6:6D:63:F7:8E:B7:AD:BF
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:f4:8b:71:ec:53:d3:67:6c:4a:99:9f:67:fb:b5:a1:db:
67:cb:ce:a0:1e:b8:36:f8:48:e3:fc:bc:7e:05:54:86:98:04:
e7:00:6b:88:39:dd:4e:89:81:a0:12:7a:df:c2:14:c4:eb:35:
db:ca:6c:82:33:21:d7:ac:74:cb:98:46:b8:e4:01:d3:5c:58:
d5:3d:78:99:93:48:57:af:3a:e2:3f:ea:81:81:45:b6:9b:31:
e6:ce:05:c4:94:af:ed:32:5d:75:1c:f7:82:58:08:c3:99:fd:
37:3b:ff:35:d0:a6:5c:eb:9c:95:da:4e:bd:0e:2f:e5:78:3e:
ed:44:a9:29:43:87:b3:b6:b5:f3:04:17:f3:e8:2f:22:e8:39:
be:4f:78:50:bd:29:16:5a:e5:b4:40:95:a5:f7:69:63:54:0d:
05:ab:82:98:10:80:96:16:40:96:c8:ca:32:e4:d7:16:d7:7e:
11:24:f3:40:9c:c6:3c:48:cd:b7:e6:c8:b4:9c:97:d6:4a:a6:
2e:22:bb:84:aa:bb:f9:af:c6:3e:55:9e:96:92:b2:59:25:df:
bf:10:d8:e1:16:1f:4e:20:78:31:55:f8:af:a8:9f:08:bb:c1:
34:8d:d9:70:42:a8:3f:a0:5a:c3:d2:8b:d9:14:82:40:b0:ef:
80:fd:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:10 2025 by rpki-client