Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: b2I08ocE1nHy7Ux14yh0zrlTR1PNSvOalCDRK6RtM2E=
Subject key identifier: 92:EE:55:2F:70:FE:5E:84:79:62:47:5D:F2:84:A4:74:77:90:03:5D
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0198D5F1999DFCBAFFE1C8C06ABE0B9F1C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: eVdaRu2ZDZh0wMGkoBmlH45kOWIDhpZxJizc3shINiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:99:9d:fc:ba:ff:e1:c8:c0:6a:be:0b:9f:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=92ee552f70fe5e847962475df284a4747790035d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:f6:f4:4c:fb:f1:84:40:18:64:1f:dd:d0:
e5:6a:76:20:1a:65:92:a1:b1:a0:3b:37:c3:c2:29:
25:da:f4:9b:a9:66:72:07:aa:2f:a8:e9:d5:ad:02:
2d:19:e5:bb:7e:a5:a7:bd:f8:0d:e1:1c:77:94:a8:
45:c2:dc:74:a9:30:bd:df:35:5a:d1:8d:25:c9:8f:
6e:4f:c6:74:e6:f2:ae:42:5c:dd:d7:22:5b:7d:21:
e9:93:c6:7a:6c:9d:76:99:f6:1c:fc:28:16:76:c5:
41:8e:d0:e8:dc:2d:ed:20:57:aa:98:12:b4:c2:b5:
3c:14:2c:21:ab:b1:d3:6d:5a:14:25:4d:2e:ba:01:
d0:dc:ce:bc:31:8e:65:b2:81:5c:71:65:d7:e2:61:
e7:84:27:6a:63:2f:c7:e6:55:da:22:08:78:b1:5a:
2e:2b:6c:56:53:99:85:ca:81:02:10:c7:1c:0f:53:
7e:2c:25:7d:e6:87:f8:19:56:09:d5:cf:57:b6:17:
d0:8c:45:c7:4e:ff:6b:f9:b3:1b:d5:22:22:bf:55:
2b:b4:1d:d9:40:8f:80:e4:45:a6:fd:eb:34:ca:9d:
16:b5:60:d4:3c:50:c7:fe:c4:ce:93:81:a4:e1:e2:
4e:79:ca:5d:eb:98:3c:52:45:66:c7:21:19:72:8f:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:55:2F:70:FE:5E:84:79:62:47:5D:F2:84:A4:74:77:90:03:5D
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b2:a0:26:51:3f:d2:f2:b0:d7:ce:15:8f:1d:bf:3b:8b:e0:
6f:b8:f0:c1:5d:ab:5c:32:d9:ab:12:ec:df:d4:ed:22:f7:68:
f1:8c:90:67:15:89:ab:9a:a1:a1:96:b4:74:b1:42:02:71:ae:
70:0c:62:60:43:49:a2:9d:25:44:89:60:10:2e:98:f4:29:e3:
5a:cb:9c:96:e8:ae:9a:19:f9:1d:c1:d7:40:30:e1:fe:fd:b9:
d9:13:4d:38:95:fe:1b:73:e9:b4:80:cb:7b:69:7c:da:70:3f:
a0:58:b2:50:7e:81:b2:6b:ed:83:d7:64:4b:10:20:1c:af:89:
f4:b2:e4:1b:d6:d5:b2:06:84:fe:e0:f3:2b:c7:69:13:fb:d9:
53:a7:7f:d4:f1:e2:ab:7e:6c:e0:af:de:76:ee:6d:53:da:e6:
30:15:f6:dd:cf:57:0f:b1:bd:58:4a:72:d4:b0:96:b4:e0:41:
51:70:79:4e:aa:cc:1d:73:05:a0:8e:29:7d:d8:ae:12:fc:18:
14:82:84:33:9e:81:31:c3:f8:f0:99:6a:b0:04:b0:c0:d0:d4:
af:e5:da:e3:df:22:54:62:58:d8:6d:c0:87:d1:3f:17:19:b1:
ba:a6:3f:99:19:7b:eb:3c:8e:16:d9:fb:c1:e6:be:1b:ca:30:
31:3e:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:20 2025 by rpki-client