Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File: uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier: hAde39bXJaWpSRlNgT6Oq/C/9sE4AqLy8VdL4TLUooU=
Subject key identifier: 75:BA:F1:94:72:08:DA:0F:6A:C7:EF:0D:F6:6A:98:EF:DB:8D:96:19
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 0198D583F3B729013DECF316A34316BFE8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 6qEQVs9RJhELhTSt-yx6PdqTH4k.roa (hash: MJPHmKEomDKDrIf3X9T4A591PCDIN9biU5Xak896EvA=)
2: SWCjjUaxCAvLsIqlq6JIIAKsNyg.roa (hash: IheYNJ5DBR2ARWU4KPU8QmLGQuMxzruzWVG2AoLba3s=)
3: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
4: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
5: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
6: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
7: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (hash: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=)
8: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: r/qxGkjogcu4WGGnChDXtMg3FqFQ3W40DJfxrZSQBWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f3:b7:29:01:3d:ec:f3:16:a3:43:16:bf:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=75baf1947208da0f6ac7ef0df66a98efdb8d9619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:45:7a:e5:a0:02:70:05:4f:39:b7:a4:2d:
17:9a:e2:5f:c5:ba:00:1a:06:a4:41:0b:89:e1:b5:
0b:41:11:62:1d:6f:51:11:98:72:1f:fc:e3:1c:9e:
52:26:64:11:48:4b:f1:7e:16:2a:e4:ec:93:58:30:
1f:56:cf:9d:8a:c1:64:92:39:55:55:11:5b:39:99:
3d:ce:c2:83:01:0d:10:fb:c2:43:c5:15:21:0e:7d:
21:53:3c:52:2b:e4:c4:14:5c:65:28:8e:a9:74:f3:
d7:d7:7e:f6:c1:d4:2e:dd:9e:ae:84:aa:21:da:f6:
c4:61:b6:02:f3:9c:06:75:95:ca:78:7d:8d:24:6e:
fc:67:ad:d1:7d:8a:c1:64:3c:48:46:f5:72:85:3d:
eb:bc:07:2b:35:6e:ba:93:e1:8d:fd:bd:2f:ce:12:
b3:de:f2:50:bb:65:2e:a3:92:c8:53:28:c1:b1:ec:
36:34:69:0f:2a:40:01:56:51:78:a7:81:d4:96:38:
7b:f6:20:a9:c6:dd:e7:15:8f:6d:58:f6:ec:f0:40:
a7:db:70:da:32:06:d8:1a:d3:d6:79:e3:1e:ed:c3:
7e:03:c4:d1:c3:de:7f:49:5e:0c:05:5d:6f:5a:e9:
b1:8c:0e:4c:94:4f:0c:c6:16:44:68:21:a8:d3:01:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:F1:94:72:08:DA:0F:6A:C7:EF:0D:F6:6A:98:EF:DB:8D:96:19
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:6d:21:3b:c5:8c:da:7f:25:cd:11:4b:71:48:de:f7:95:
f2:a7:c8:9b:d0:f9:fa:7a:b2:c7:65:fb:23:71:66:b6:63:eb:
9a:ce:e5:be:13:58:d5:04:3d:fb:ef:a3:1a:36:a5:25:e6:d0:
6c:27:c7:4c:86:8b:30:6f:c6:f5:0d:04:a1:94:3d:80:19:ed:
11:1e:37:ee:6d:9d:f9:c1:b1:9b:41:ea:b4:ea:69:24:57:8b:
69:97:29:38:54:dc:fe:81:19:42:d4:ff:9a:81:23:f9:ac:ce:
fe:f8:1e:49:d3:84:f0:70:62:5b:97:9c:7c:f6:9b:1e:19:3f:
77:e6:5b:b2:18:f6:ca:5f:33:cc:20:cb:94:ad:d3:ff:80:07:
88:57:30:39:76:38:a2:00:0b:2a:6b:0d:7d:e7:47:ef:48:6c:
14:0d:60:9e:68:ba:1d:89:d5:72:f3:7a:42:ae:dd:0e:14:53:
63:72:ab:15:f0:3b:00:c4:25:73:8c:14:c8:c5:2c:37:44:6f:
45:f6:a4:a1:80:2f:20:90:ca:2a:e8:73:2a:52:a5:d5:c3:66:
b1:c7:2c:75:ad:08:46:0e:1d:0c:6c:be:a6:3d:68:4a:14:65:
09:0c:d3:ff:27:9b:de:ed:d7:28:e3:21:36:03:5b:b4:5c:c7:
e2:e3:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:50 2025 by rpki-client