Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier: Tq6NV0qNl+xKHp4rOoKMpntKhtWlOAHhqAhXCGi1Fgw=
Subject key identifier: 3E:56:EE:C0:35:3C:D8:D2:B8:2E:F8:B1:B9:7F:4F:F1:DE:F7:38:2F
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 0198D516003BD2E7C4F498F8ABB075530166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=)
2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=)
3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=)
4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=)
5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: fyfBIeJRessZGVJ7tofr0lwzmeMNUrcVpiYT/J0QP48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:00:3b:d2:e7:c4:f4:98:f8:ab:b0:75:53:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=3e56eec0353cd8d2b82ef8b1b97f4ff1def7382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:d5:41:94:df:2c:19:f0:94:2c:c3:78:cf:
7e:57:64:dc:53:6a:7b:3e:c2:e3:55:ef:87:c2:b0:
1b:d9:77:28:1c:de:6d:bd:33:b6:12:0f:c2:46:25:
f9:9e:65:a1:d0:d9:be:02:48:8e:94:39:a3:cf:e1:
f3:0c:c3:32:3f:d5:08:f7:b6:29:b0:3a:a3:c1:2e:
3e:c9:4b:80:ec:0d:0e:58:e4:f4:c2:4a:a6:33:0a:
ec:a7:91:6f:6e:dd:d2:59:4d:d8:bb:32:0b:45:3a:
3c:19:34:18:64:ce:1b:d9:bb:7e:19:b6:93:48:27:
e9:c1:68:74:62:ab:03:d0:b4:87:0d:ab:47:c9:7e:
0f:44:d3:8a:e4:27:8c:6a:23:b9:36:66:92:5d:35:
15:36:7e:07:b0:79:bb:bf:fd:b2:89:22:44:08:40:
c1:e5:5c:46:08:9f:5f:f8:d8:3c:73:a4:f3:ca:dc:
a1:7f:90:4a:e2:d9:28:d0:3e:62:d6:26:96:4d:fa:
cc:74:81:01:18:8f:cd:21:37:2a:24:bd:31:04:24:
30:17:15:d7:ed:2a:73:67:c2:5f:e5:2f:55:6f:43:
18:35:6b:72:58:80:78:7b:29:0c:f5:e4:0f:b5:71:
8e:2f:b9:57:69:49:7e:70:27:d4:c0:d3:ab:4c:5b:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:EE:C0:35:3C:D8:D2:B8:2E:F8:B1:B9:7F:4F:F1:DE:F7:38:2F
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f0:a4:20:bb:f2:40:34:77:98:37:34:3d:c0:55:0f:ff:39:
0d:42:28:68:b0:86:e3:98:05:73:f9:bf:b5:3b:25:83:77:ca:
64:65:a4:fb:56:24:9c:09:5b:ae:2b:7e:be:a2:7a:7b:72:9b:
15:cd:78:fc:f0:b1:9f:6b:19:ba:fa:26:51:98:49:7e:9e:c6:
21:21:dc:94:74:90:0b:40:24:b1:73:e4:4f:f6:43:86:c4:20:
75:17:95:cf:e9:09:27:67:55:f0:e1:02:42:0a:25:b6:df:a8:
b6:c5:ae:d5:5b:ff:73:ef:1d:12:00:92:31:e0:eb:fb:e3:90:
78:4e:7c:49:b6:66:bb:a4:b3:f4:bd:41:38:e3:ef:ce:e1:2c:
63:b0:31:99:10:9b:18:89:d6:be:f5:f7:12:a5:54:9b:17:c5:
df:54:82:40:53:c5:40:3f:f2:aa:0e:69:73:cf:90:1e:23:4b:
28:df:ce:98:67:6a:eb:3c:03:6a:53:cc:85:48:f4:89:e0:5f:
3e:8e:32:5d:a7:1e:3d:c1:36:f1:18:16:54:63:96:a0:e6:4c:
86:66:e1:ca:b2:b7:d9:23:75:64:a0:ac:d5:fd:bc:ab:3f:f2:
d6:e7:7a:93:81:84:ad:b8:52:3c:44:aa:75:98:06:61:41:44:
89:94:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:32 2025 by rpki-client