Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: PHYCoHBVHmcd/34lfvyWCE1ivxhXcj/TN8i9TXs74nw=
Subject key identifier: DF:81:00:62:84:F2:58:C2:CF:FD:02:BC:61:04:56:69:73:58:65:CC
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 0198D6987F1FDC143FA9CF4C3EADD510BE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 13A5
Signing time: Sat 23 Aug 2025 11:02:54 +0000
Manifest this update: Sat 23 Aug 2025 11:02:54 +0000
Manifest next update: Sun 24 Aug 2025 11:02:54 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: IRKfzA6IjyMVnXCH2r///7FTn0427BT/7e6sFXSRMvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7f:1f:dc:14:3f:a9:cf:4c:3e:ad:d5:10:be:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Aug 23 11:02:54 2025 GMT
Not After : Aug 24 11:02:54 2025 GMT
Subject: CN=df81006284f258c2cffd02bc61045669735865cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:be:c5:e1:95:b7:57:3c:f4:85:f6:57:ee:
81:4a:73:33:86:c7:bf:a8:02:3e:ae:31:88:f3:12:
58:11:35:a5:5e:ef:11:8a:e6:cb:72:50:d0:be:c9:
e0:ad:d2:ee:74:4c:9d:63:c0:48:58:be:25:19:ad:
22:a6:6c:17:b3:16:97:4c:be:3c:4a:24:18:b0:bc:
43:ac:cb:8f:13:70:46:86:25:e7:ac:fa:ae:5c:43:
22:1c:a5:51:4c:2e:82:c2:49:b6:93:f7:58:60:70:
d5:41:10:c0:fd:ad:0f:33:22:8b:07:f1:7e:11:2a:
58:16:bd:d3:2b:30:2b:4a:7f:12:3b:f6:f2:13:b7:
0a:0a:31:7b:98:e1:47:58:30:37:b0:d7:65:20:da:
22:bf:a6:bd:47:89:c3:84:33:0a:9d:1d:c0:27:3d:
cc:7b:9a:d4:1c:6a:d4:54:95:5c:52:ab:0a:fb:45:
52:0a:2c:9e:4b:39:50:8e:f8:b5:13:d3:02:bb:7a:
6d:b7:1c:f1:fe:34:d6:6f:46:07:8e:24:b5:ab:40:
3d:79:6e:7c:04:7b:f1:c5:da:fc:c6:42:6d:a7:19:
e6:54:f4:b1:9a:b3:6a:fe:72:82:10:80:e0:9a:d7:
1b:0b:15:f3:f8:51:2e:0f:7e:5f:31:ae:10:74:07:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:00:62:84:F2:58:C2:CF:FD:02:BC:61:04:56:69:73:58:65:CC
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9f:c7:0c:66:b1:5b:50:b9:a8:97:4a:42:d5:02:bb:7e:0a:
4f:19:40:e5:44:64:10:15:c0:f7:21:3b:64:0c:fd:e4:1b:56:
02:6b:e4:1b:ae:ed:af:4b:c2:52:62:f2:b5:74:ff:45:a6:15:
61:f7:74:ff:c1:3d:e8:c2:ac:2b:71:4c:f7:e3:4a:c1:70:23:
18:a6:0f:06:a6:0a:84:8c:b7:48:39:d4:2d:72:18:c2:a9:9a:
36:e8:c2:77:9b:8b:92:3d:3e:1c:47:eb:4f:d0:a2:32:f8:b3:
96:b4:fa:2c:4d:9c:2f:80:6a:b4:df:8c:4a:1b:3e:05:72:b4:
e4:9d:44:0f:47:1f:45:83:91:2e:12:85:70:1b:84:2d:33:44:
82:c0:e0:07:3f:5d:ab:2a:05:e3:dc:6e:5c:9d:98:10:b8:3f:
9a:92:a5:50:e8:25:af:23:66:09:95:4f:9a:1b:4f:3c:9e:22:
c5:cb:50:05:d2:4b:2d:c9:e9:9e:c0:bd:8f:db:fd:e1:17:c5:
72:f6:d4:2f:18:2e:6c:28:86:9b:93:86:8b:79:75:d1:7e:4d:
eb:50:ba:12:20:fb:17:0c:eb:2f:22:4e:66:95:59:1d:e0:5d:
e1:3d:75:31:bb:28:93:73:ab:9d:70:42:df:07:b9:e7:0a:f3:
31:ba:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:59 2025 by rpki-client