Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: H3KRWEPjQMcCs9jywFXlUGRgRVw7ovCYVpP9r34dauY=
Subject key identifier: 40:C3:E4:B0:4E:E7:2A:1D:46:40:4E:64:7C:1A:C2:3A:B9:75:69:76
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 0198D661040C83B93530DF5BEB0999D7F984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0ECD
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: UCb+nPwevUTydscWmk6p165guFGtAqC9yhoN/76esu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:04:0c:83:b9:35:30:df:5b:eb:09:99:d7:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=40c3e4b04ee72a1d46404e647c1ac23ab9756976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:5a:e9:b9:9d:0f:6b:0a:0e:8f:2c:83:01:
93:2e:64:a7:37:da:ce:6a:e9:5e:c7:ed:00:8c:95:
62:03:c4:67:e3:04:35:e5:f8:a3:f7:15:62:5e:00:
77:52:3a:4f:28:8f:34:9b:e7:96:93:10:57:22:e2:
bf:f7:61:6f:a4:f9:dc:9b:59:06:d0:ec:e6:a8:20:
54:f5:b0:50:ad:c4:d9:96:94:e0:32:ff:a3:0c:5c:
f8:6f:f9:90:ca:82:d1:67:7f:c4:ef:16:78:94:9d:
8b:de:0f:15:b4:a2:dd:47:16:76:1f:31:4c:05:fb:
c1:2c:78:6f:a1:4d:9a:b6:92:a6:75:72:46:3a:d3:
2e:02:1f:11:71:f1:7c:f4:0a:9a:2c:b3:eb:1a:50:
f5:e0:62:f6:fe:4c:0a:f4:6e:44:ca:5d:c0:a8:a8:
e1:b0:be:63:4f:6f:ef:2a:70:ea:56:23:ea:63:e8:
cd:34:49:80:96:31:35:22:ba:aa:fa:dc:a7:e5:e9:
87:5d:e3:86:fd:09:71:b6:1a:e5:ab:83:e8:a6:97:
1e:3d:b9:60:9b:3c:4d:ba:0c:f6:59:d1:97:18:b3:
2b:cf:95:cf:79:6d:9f:cf:13:27:e7:22:b0:30:54:
08:0e:0c:83:0b:76:ce:22:eb:2c:61:39:52:66:ce:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:E4:B0:4E:E7:2A:1D:46:40:4E:64:7C:1A:C2:3A:B9:75:69:76
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:34:2b:e4:6d:80:56:3e:67:0a:07:c2:46:f3:7d:47:51:ef:
e1:44:1b:53:b4:37:1c:6c:0b:72:76:de:09:da:4f:9d:91:73:
50:9f:97:17:45:9a:5b:43:77:03:80:0f:39:18:56:56:20:9e:
c9:ee:d5:be:9b:2b:2b:bb:aa:65:4a:3c:64:65:b7:13:8d:4f:
ce:4e:83:06:7a:3d:b8:3d:02:eb:0f:7a:67:00:cf:48:8c:26:
76:f4:6d:d2:3e:38:6e:7d:d8:b5:e7:a0:cc:ba:f8:dc:a9:ee:
5c:e4:67:06:70:6e:64:92:96:04:0b:54:34:fb:35:ca:33:dc:
77:10:a5:7d:a8:6c:a7:d8:64:12:36:48:26:0c:48:c8:15:03:
91:ec:5f:fa:65:b6:d2:43:3e:df:dd:aa:e3:b3:4b:62:bc:41:
4d:3a:c3:6e:37:ec:f8:f6:ae:50:7e:cc:1c:8a:4f:44:91:69:
05:20:3b:6a:69:b2:3b:d5:39:f0:36:e3:d5:bd:e1:05:f1:ea:
78:37:2e:2b:f3:c7:f2:36:cb:da:9b:e0:4a:87:ea:07:91:5b:
70:ec:8f:52:a8:02:e5:2e:02:e0:9c:75:71:c4:77:96:b7:e0:
df:59:7b:09:94:71:96:ce:19:51:f7:8a:f4:cf:4c:a3:78:86:
bd:eb:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:20:26 2025 by rpki-client