Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: IMGnculL2NbsXHiRJ1feikycrdhTxFjIPIoMwdQksng=
Subject key identifier: 00:88:43:DC:5B:F2:1E:CA:E2:63:44:40:F6:5A:AC:3F:B4:38:0A:A1
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 0198D40460CDC92A3AC42409BCD39CA1D740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 05E1
Signing time: Fri 22 Aug 2025 23:01:53 +0000
Manifest this update: Fri 22 Aug 2025 23:01:53 +0000
Manifest next update: Sat 23 Aug 2025 23:01:53 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: CkP0YqdLWPvHBFVvCDP//yIEUcSgUoRTD5B3wIJnThw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:60:cd:c9:2a:3a:c4:24:09:bc:d3:9c:a1:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Aug 22 23:01:53 2025 GMT
Not After : Aug 23 23:01:53 2025 GMT
Subject: CN=008843dc5bf21ecae2634440f65aac3fb4380aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:1b:5e:1a:2e:3d:51:de:48:ef:17:54:93:
ba:13:2f:40:cf:91:2e:46:c1:a5:02:73:ab:65:b5:
9c:4a:98:9e:4b:5c:51:9f:90:78:48:a3:86:de:2f:
87:f6:97:ab:6d:55:00:60:85:a0:8b:b8:00:d3:e8:
04:3a:dd:e1:27:98:e4:cf:d8:aa:98:58:f3:f3:16:
e2:8b:60:4e:b1:99:64:b0:ed:02:fd:c2:ad:50:04:
52:bf:09:c9:6d:46:be:29:a1:f2:69:c1:9a:91:eb:
8f:f3:96:5f:cb:ac:ae:a0:f8:9c:91:aa:2f:2a:fc:
b8:1a:26:16:68:16:04:23:53:52:b9:35:b9:b5:11:
3b:f1:37:7a:e6:5e:f2:f2:c3:85:fc:99:84:b3:17:
de:d8:80:60:4c:02:f2:14:19:86:73:28:ce:6b:5e:
50:d7:70:e2:52:e4:c2:5c:ad:e4:c4:9e:37:a1:31:
64:20:88:9b:01:c2:e0:b5:84:d8:d3:24:52:67:d9:
75:c1:50:6a:b9:b6:5f:26:a1:a8:f5:3e:cd:75:07:
bd:b2:00:ab:d8:38:65:0b:88:31:3d:08:2d:87:22:
10:c3:fb:44:0e:c1:4e:42:c3:46:6f:a6:03:d8:df:
ec:22:91:af:ad:76:6b:a0:81:3c:59:e7:91:08:dd:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:43:DC:5B:F2:1E:CA:E2:63:44:40:F6:5A:AC:3F:B4:38:0A:A1
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:d5:3e:32:97:c8:a0:3d:42:71:43:7c:cf:a9:94:7c:ce:
68:73:7a:8c:91:12:22:30:fa:3c:14:ae:71:85:06:ba:bd:f7:
2c:95:d9:0f:ff:f8:20:61:29:fc:83:09:14:6e:de:02:44:ea:
87:a0:da:67:af:3e:a8:29:1f:45:1d:be:f0:6e:a2:d5:42:8b:
65:5c:48:67:a9:ff:52:51:9a:2f:88:54:e9:c8:03:b5:6e:a4:
bb:19:e8:f0:d2:be:f6:3a:de:32:82:ec:df:d5:33:d4:1e:0c:
95:10:1d:3d:22:27:28:96:56:a8:59:82:d2:a5:d0:4b:f0:0d:
63:cd:08:3a:fc:cf:c3:9d:c2:f7:dd:db:6b:2b:83:d4:3f:d2:
f7:68:97:be:3d:4b:49:18:00:e9:a6:79:a8:98:51:e7:71:54:
cf:48:ed:33:08:61:58:6d:52:46:f9:69:2a:fc:21:37:1c:0c:
c1:5f:2a:87:17:a0:a2:42:a2:da:0e:31:87:19:4a:6c:e3:47:
8b:3c:4e:f9:af:6f:af:44:6c:3b:da:10:61:bc:cf:54:27:ad:
a8:b0:78:b7:b4:b3:f8:af:57:34:6a:24:ec:8e:db:85:e0:62:
79:96:f3:91:14:fc:9d:0f:dd:fd:68:ac:95:2f:0c:93:43:38:
4d:f4:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:56 2025 by rpki-client