Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: uoGl/o5dnZsbng2Fp0Y0/9nwV0fXJarlmH1DwFSAr8g=
Subject key identifier: 88:8B:13:3D:90:FE:C1:F3:C4:78:BD:12:43:A9:7D:34:59:CA:37:EA
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 0198D54E01E90F3A749D8D4687D3433B7550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: EF
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: c24PHhOu2TTB+M06rElD+u5feiPpRj4wkjPAsZ+jxoQ=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:01:e9:0f:3a:74:9d:8d:46:87:d3:43:3b:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=888b133d90fec1f3c478bd1243a97d3459ca37ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:8d:c7:52:92:f0:48:bf:40:a5:3e:84:58:
22:45:58:f1:2b:03:a0:67:0e:39:91:b4:f1:3c:82:
dd:8e:c8:d9:39:c6:37:f2:35:0a:42:9b:b3:c9:60:
d9:9d:3c:e7:32:5c:fd:fd:a5:68:db:6e:df:df:c6:
fd:7f:1b:0b:12:51:ec:ef:fd:a6:06:89:53:ad:0d:
8f:a6:d7:0a:78:cd:41:fb:d4:08:fe:45:2a:7d:81:
c1:b4:f0:a4:b8:59:52:92:6e:69:ba:d6:6c:91:78:
fa:68:56:53:e4:9e:e4:97:e1:ba:41:84:0d:25:b0:
d4:d9:61:92:15:17:de:a3:16:9f:23:46:2f:6c:3c:
18:c5:55:19:b5:87:2a:87:18:c7:1e:86:86:c4:db:
be:4b:67:45:ae:bc:08:68:29:97:a4:7e:d7:a0:15:
a0:64:08:4a:88:47:75:93:da:06:f4:3e:12:6f:d7:
6b:4d:59:e1:9e:fb:c1:21:d4:2a:07:68:e8:e9:ef:
78:7c:40:f7:ad:df:b9:67:cb:68:b3:2e:65:88:6c:
a8:bf:d0:5b:5d:59:be:72:63:42:61:47:97:f3:fe:
25:63:a2:02:ed:00:ae:90:9d:95:6a:89:ff:f2:e9:
2e:50:7e:9d:91:b4:ad:08:6c:f9:ad:a0:95:70:18:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:13:3D:90:FE:C1:F3:C4:78:BD:12:43:A9:7D:34:59:CA:37:EA
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:ad:7c:0f:25:15:53:a1:15:e6:cc:30:67:e1:ea:c9:4d:
31:ab:b8:b1:f3:49:1a:92:7f:31:a8:02:55:76:b0:6d:90:fc:
02:33:9b:36:11:22:c8:46:24:d9:b6:61:5e:00:09:98:6f:d2:
ed:5d:af:c1:bb:21:c4:89:93:cf:20:17:32:ba:4e:49:76:f5:
01:02:48:93:4d:79:29:57:3c:a7:ad:59:9a:52:7e:ff:2d:32:
f5:25:ab:42:39:03:2e:f5:1e:ca:60:cb:e4:0f:5e:35:31:72:
25:15:64:70:df:2d:74:0c:bc:8a:16:22:d3:a6:fb:a2:42:ad:
0f:4d:fe:65:46:fa:7c:bb:7a:fa:a8:14:02:78:a5:22:b3:83:
b8:3a:3d:14:3b:f2:05:ec:fc:01:42:4f:6e:f4:a3:04:7c:34:
92:34:14:21:be:22:82:c4:2c:eb:0a:e4:89:73:70:86:61:0e:
e6:82:29:c0:98:a2:ad:78:38:c7:00:9d:3c:1d:5e:19:42:51:
47:ad:8a:41:4e:60:77:37:57:10:f4:46:e7:02:89:c6:2d:e3:
55:e2:9d:b5:81:a7:36:7f:76:64:a2:83:7b:09:bc:7e:da:49:
67:f8:8e:d0:9c:97:4b:48:1a:7a:9f:83:f5:59:81:3a:67:fe:
82:ee:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:36 2025 by rpki-client