Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: 5T6Mx9uAMGIyvOvtE7z/9WqOMkSTlrp1Rer2bvcNfE4=
Subject key identifier: 60:F3:28:42:D4:FD:F5:F3:B1:AE:E5:88:AC:D3:B3:6E:50:9C:2A:DA
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0198D698024DA28380886B91E05680AE34CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 026F
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: 0tAPZHZfKg+8Ft6I0ZXgpqNceMFIqM/z2GQw+UbNQ8o=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:02:4d:a2:83:80:88:6b:91:e0:56:80:ae:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=60f32842d4fdf5f3b1aee588acd3b36e509c2ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:d8:bc:ef:2c:15:56:1b:f9:41:08:3a:fd:
0b:2e:04:00:3c:4b:81:0a:97:01:8f:53:7f:3b:65:
40:9e:e6:88:b7:b7:33:e0:a4:4c:16:99:fb:f8:89:
a2:8a:be:3d:5c:d6:20:4a:a2:04:32:7b:df:1b:49:
65:aa:be:4b:c4:84:9e:d1:2b:9b:65:f1:a5:90:9c:
ab:44:89:bd:9c:5b:3f:9b:2c:6c:10:32:01:fa:c6:
40:49:ea:4a:cb:87:51:1d:11:0a:18:e9:79:14:37:
c2:fd:9f:f1:73:92:df:c5:04:b3:b5:f6:10:66:dc:
fd:80:01:a4:06:0c:12:80:fc:17:07:24:5a:d6:dc:
ce:92:9d:34:bc:9c:4f:2c:1d:5f:86:5a:0d:3a:ba:
58:61:0e:d3:ec:15:5e:c8:99:8f:55:e2:4e:3c:f8:
7a:45:d3:15:64:b7:58:23:87:c7:ca:f5:21:40:49:
aa:d8:8b:3c:ae:71:7b:23:8a:27:8b:59:6d:a8:c5:
7f:9b:b5:fd:b1:29:46:f4:bd:f6:05:8f:3c:a7:a0:
42:cb:05:52:3d:d3:3e:48:91:fc:31:23:81:f8:d2:
87:b8:84:46:6b:82:90:ed:0e:f0:24:8b:aa:0a:64:
0b:0f:75:c2:46:b5:a3:5c:02:a7:37:03:6c:87:e2:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:28:42:D4:FD:F5:F3:B1:AE:E5:88:AC:D3:B3:6E:50:9C:2A:DA
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:25:f4:43:57:56:47:a5:b4:3e:8c:f3:32:15:71:6e:f8:bf:
6d:4f:e6:30:6d:73:bc:f1:2d:36:4b:a3:a5:89:9b:0e:f2:72:
d7:83:74:73:e8:56:b2:d9:e3:93:58:f0:25:ae:11:61:bb:3d:
a4:e5:dc:7d:f0:2c:0f:aa:75:d6:97:84:1d:26:57:75:96:e5:
30:de:e7:79:b7:ba:07:28:f3:79:d2:3a:8e:20:90:ab:94:d3:
61:9c:98:9c:36:1b:28:20:e9:5e:0f:c5:89:a3:0e:cc:88:8f:
ab:52:47:9d:cb:27:01:e8:17:07:d5:42:d4:b6:09:d4:0b:5f:
02:2c:9b:48:90:a8:08:30:d1:f6:f2:51:a4:f1:c4:d7:a1:3a:
2c:05:f2:2b:ce:aa:cd:c1:c5:89:be:75:3e:66:cd:07:51:69:
a0:13:d2:ea:fc:0c:98:8e:1e:a4:12:bc:b0:56:a9:86:ca:03:
08:da:e2:b7:49:e3:b5:e8:9b:e3:62:f7:d7:ad:34:96:40:d9:
33:08:b5:f9:a9:15:f3:81:37:ad:51:da:fc:8e:0e:63:fd:9c:
d0:26:74:b8:02:a6:f2:72:dd:b9:3f:74:51:e1:fa:97:9d:b4:
05:4a:2f:6c:2b:43:fb:80:fa:f8:f8:7c:68:77:38:4d:90:3b:
78:fc:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:08 2025 by rpki-client