Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier: L/he09siT71QNliCU3Xr/H+To+KKSR+VDmogWPHy6n8=
Subject key identifier: CB:4A:5E:8E:D1:EE:6C:79:E1:AD:EF:06:18:76:AA:0C:29:0C:60:16
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial: 0198D4DFFE8822AC7BAFFE351B9674B494B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: YKrcaK2pdgpnGG54SZz0qfQexhIEy2kzLlMnGizeDww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fe:88:22:ac:7b:af:fe:35:1b:96:74:b4:94:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=cb4a5e8ed1ee6c79e1adef061876aa0c290c6016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a9:fc:fd:d1:ce:b8:f4:08:ee:df:98:04:13:
8b:da:8e:91:c2:7b:48:53:fb:a6:81:43:b1:15:ad:
ec:d7:68:6d:a6:86:c8:b5:42:9f:33:74:8c:aa:c4:
51:aa:88:6c:de:17:66:9c:e1:6f:da:48:23:ad:9b:
72:dd:f1:d5:f6:ce:f4:a7:3e:1f:4a:ef:e0:8b:95:
cb:1c:c9:ea:26:60:5e:ba:0a:1a:a2:8f:0c:bf:da:
98:e0:dd:c3:c7:b4:ba:26:2e:f1:4d:80:6b:20:76:
5a:81:36:4a:87:4c:fa:ff:2c:78:92:71:54:c8:0b:
51:29:49:cb:d3:da:fa:9c:15:e7:d8:f8:27:90:6f:
10:5e:dc:36:0d:30:6f:fe:f6:2b:bb:c8:04:c3:c9:
b8:3f:c7:6d:d2:5f:e4:2d:a1:08:63:33:3b:7a:bc:
ca:07:b2:75:47:9a:24:36:0f:15:bb:30:f2:85:76:
18:73:e8:08:8f:62:d7:e2:ba:94:1b:eb:cf:09:69:
54:c8:fe:85:01:ed:b0:70:0e:7b:d2:b1:0e:77:52:
e2:bc:1d:7d:47:87:4f:9f:24:22:dc:cb:22:78:f7:
db:4d:30:93:5c:87:7d:cb:e6:55:ee:d5:ae:9f:3d:
18:31:0a:63:35:0b:3d:ba:c3:a7:9b:ec:b5:c3:ce:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:5E:8E:D1:EE:6C:79:E1:AD:EF:06:18:76:AA:0C:29:0C:60:16
X509v3 Authority Key Identifier:
keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:10:26:ee:13:e2:b3:11:d7:b0:d0:97:de:cb:b9:ef:d2:4c:
2b:ed:68:66:23:19:4a:ee:01:72:e8:11:09:13:c0:61:86:1d:
ab:e4:08:cd:4b:a8:95:41:a7:b8:30:f9:b6:ad:a5:0a:17:ac:
d2:fd:c6:91:f0:5f:49:90:8d:d9:67:3a:b0:3b:98:7b:fd:47:
6b:76:d1:a1:52:e2:3d:30:09:bd:18:bb:c0:6c:94:f0:cf:63:
27:c6:7b:87:ca:57:09:a6:12:43:89:94:42:ca:28:36:57:9a:
aa:a1:e4:63:00:7d:db:f5:8b:0c:29:0f:17:ed:48:28:f1:b6:
a0:f3:37:f5:7d:be:2e:79:c5:79:04:7f:ab:d9:5c:2e:cf:d6:
52:f3:2a:58:b2:67:f4:4b:f6:a7:92:21:00:e3:07:46:be:73:
6f:35:3c:65:6d:88:7a:c1:02:1a:99:8f:e5:d6:48:00:8b:41:
0d:3b:31:9d:80:3e:31:5b:a8:0a:a2:70:19:fa:5f:07:01:30:
93:66:6d:d1:ad:06:37:25:ab:85:1b:fe:ae:80:31:09:3e:e5:
bf:4a:dc:ca:c3:9f:04:07:52:2f:dc:fd:96:d8:b3:52:8a:8e:
1b:69:5e:e9:42:c5:1b:6e:6d:3d:b0:61:37:fd:ed:69:a5:54:
28:49:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:29 2025 by rpki-client