Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: Ey3uogeFMbhyUcR37PjfQrGJkZtVWsQ92DC/xFSJVYQ=
Subject key identifier: 6C:D3:05:E2:48:0A:EB:16:15:DF:F3:F1:A1:C2:7A:40:CA:F4:80:E0
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 0198D47257B8886BCB553580472466291CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0A4F
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 8LTqXIcp868leBTp/9j6fZWCc158BW2Ou+S7PmkSFRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:57:b8:88:6b:cb:55:35:80:47:24:66:29:1c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=6cd305e2480aeb1615dff3f1a1c27a40caf480e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:a2:e5:c0:88:34:8f:53:14:c7:1d:27:e2:
72:45:f3:98:70:93:d1:1e:2d:c8:f3:e7:d2:84:98:
68:95:97:51:7b:c0:68:dc:e6:55:15:cb:05:71:68:
8c:57:b1:53:9c:0b:1e:8c:1d:a1:72:c2:c1:da:be:
a3:11:bb:16:f4:30:60:e8:ad:7a:f4:57:43:c9:79:
b7:f5:f4:b1:2d:5f:2a:25:95:a0:69:57:b3:a6:d8:
f3:95:f6:b9:ca:cc:83:4f:a6:cd:27:e5:65:bc:14:
93:ad:7c:9c:23:52:15:ac:80:a0:3e:10:68:24:a8:
e1:ad:6d:50:21:76:2b:fe:25:17:59:95:a3:df:ca:
1b:c0:79:6e:1c:d8:d5:47:6c:3d:52:df:be:9f:f3:
89:33:83:89:7e:6e:fa:de:ed:b8:37:3a:74:dc:6e:
9f:25:2c:95:93:91:05:fc:82:cf:c2:74:2b:b1:d5:
88:5b:15:f9:36:eb:63:e4:8e:7a:56:ae:bc:e9:aa:
eb:24:6e:a5:34:93:b3:9d:ca:95:a9:4e:b1:9b:37:
36:65:a8:63:f7:da:4d:d4:0a:e1:ed:80:7b:37:d9:
d0:38:d3:27:46:eb:40:29:40:a3:36:4c:c8:44:b8:
7e:eb:8f:3a:a5:f9:6a:4b:bb:7e:15:5e:35:b4:e0:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:05:E2:48:0A:EB:16:15:DF:F3:F1:A1:C2:7A:40:CA:F4:80:E0
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:cc:15:ac:e0:e8:35:73:17:89:e7:cb:34:b1:cb:34:44:
8d:ac:b7:78:c1:60:46:0e:31:6f:5b:f3:80:c3:d3:07:7d:7c:
ae:f7:7c:36:cd:aa:17:1b:c7:16:ac:9e:ed:17:3e:c8:d6:66:
c6:33:9f:c0:ac:c6:73:21:ca:b9:0a:cf:2b:1d:44:bc:5e:ed:
62:96:7f:f8:5e:c1:37:91:31:6e:00:f4:69:9e:42:96:af:89:
78:fe:10:8f:ae:c1:51:81:4e:03:d6:31:c7:64:e0:19:2d:75:
67:48:b5:e7:e4:cb:a8:0b:e2:e5:36:40:c8:07:26:6f:77:88:
c6:d7:62:57:5c:20:ce:92:35:a6:d3:48:dd:bc:6a:56:43:9a:
84:8e:97:8f:bd:8e:88:3e:7f:c3:d6:fe:9d:fb:3f:1f:33:40:
21:4c:02:d0:7e:1a:f5:80:d3:7d:28:ff:1c:e0:c1:bf:dc:ab:
23:72:db:3b:83:75:12:95:a4:8d:15:e1:73:1d:af:06:a4:d9:
e2:bd:94:72:55:d7:2d:b6:7f:0f:fa:b2:b8:91:1d:f6:c4:99:
7f:f7:90:d1:3d:18:51:d9:1a:42:42:34:2e:b7:e9:c3:06:40:
eb:1f:44:65:26:d5:34:37:4f:e4:cc:73:95:97:01:60:d8:52:
a7:53:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:13 2025 by rpki-client