Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: vfNysIFwYoPt2yoIcvjb5P0WTiGpgPmKP3CrfGX3IIg=
Subject key identifier: CC:0E:FF:75:CA:06:28:40:41:69:0D:C5:ED:43:5A:95:C9:07:55:83
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 0198D660269B43784B7FCFBA18D30F07C935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: 0Ep10VAHwS9stSZex6H0xSJey0zVGFSYJOUPnzV5854=)
2: lWp2pNz_835GJJ7O_kZ3ggU57jI.roa (hash: X3vMszfClu3G8XSh8MSgP9m7KkxSRkxy0B7sIqti9o0=)
3: pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa (hash: jRPTi+5Lw+W7BzK3Rqd36iIkpmMkM0yVpsHfYrztv94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:26:9b:43:78:4b:7f:cf:ba:18:d3:0f:07:c9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=cc0eff75ca06284041690dc5ed435a95c9075583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:18:10:89:a6:88:e9:7c:7d:aa:80:ec:76:
f9:32:29:af:b9:ae:5b:9e:1c:a0:d1:f8:9d:2c:85:
3b:11:5a:9b:43:90:63:a5:35:1b:04:c0:74:6b:3f:
10:59:28:88:32:06:3c:be:36:21:a4:67:28:d7:68:
32:71:f7:54:40:0a:db:be:6b:b9:fa:0a:79:be:e8:
9d:d0:93:8c:96:c9:2b:f1:04:e6:32:1e:d6:d1:1f:
a9:5c:c6:8f:9e:a0:e0:6e:f1:e3:c5:22:4f:c3:01:
4b:6c:2d:4e:60:fc:6b:8e:ce:fb:86:20:53:32:af:
94:47:de:bd:a7:bb:d6:12:23:5c:c7:99:1f:b7:99:
2a:7c:31:46:04:73:b9:52:97:43:68:69:01:af:34:
16:3e:16:22:9e:c9:23:9f:f0:5d:7a:0f:78:4b:13:
44:11:36:9b:ca:03:84:1b:c7:2c:f1:da:d7:ed:63:
d2:26:26:e7:68:19:4e:71:4f:81:da:39:16:a3:12:
f6:33:80:05:6b:5c:98:2e:14:c0:b0:0a:93:12:b4:
be:29:89:09:36:d5:40:e7:50:1d:c8:67:a9:91:9c:
f1:a0:fa:15:7f:12:43:41:47:15:67:d5:b7:df:ab:
0d:a1:c2:dc:21:65:de:ae:43:4c:71:d4:12:ea:4a:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:FF:75:CA:06:28:40:41:69:0D:C5:ED:43:5A:95:C9:07:55:83
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:0e:0e:91:63:76:20:dc:80:5e:61:91:c3:08:5f:0e:15:
9e:d5:bd:12:7f:62:a8:63:f9:0f:5b:94:f5:bc:91:4d:2d:7e:
b9:a1:54:e4:bc:41:17:21:69:a1:84:10:dd:cd:b2:08:ca:57:
20:a1:6d:f1:c2:0c:a7:65:e9:6a:dd:06:b2:3c:aa:00:59:7b:
db:c4:cf:c5:8d:eb:e0:31:9b:db:d7:4b:47:37:c8:5b:59:1a:
b9:71:e4:4e:fc:f4:7a:81:47:b2:b1:3a:91:25:d6:85:28:5a:
48:1c:c0:5d:5d:86:1b:a2:26:ca:49:dc:89:55:6d:46:0a:68:
c0:8f:76:d1:7f:c3:5f:3a:d4:d9:db:ad:4b:54:1b:e6:58:61:
f2:67:6e:68:dd:bc:16:ce:8a:a5:c6:59:ce:ee:c2:2d:2b:39:
21:a5:53:74:1c:c7:eb:93:41:ea:1b:f3:19:1a:b2:e9:23:b0:
17:76:18:00:7e:91:f5:e0:dc:52:f2:3f:bf:a3:10:98:37:20:
7f:3e:7b:a7:9d:b7:bd:77:1f:0c:df:c4:98:f4:8d:b7:f2:dc:
66:80:81:2a:39:2a:7d:b4:64:a4:f0:87:cf:ce:24:06:84:65:
2b:77:73:f2:e9:84:a2:8f:38:00:cb:fa:98:88:b3:22:c5:21:
43:ec:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:24 2025 by rpki-client