Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: /Qqy+Zmx39EP9ivyBXBFSQpsrwlroAfqX/coLAoyK0Q=
Subject key identifier: CE:B6:F4:BB:BF:32:F4:92:79:B9:22:90:BE:23:74:65:CE:2B:B8:2B
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0198D5156523953741036CEEDFE5B42E5115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 13C2
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: Cyrc6mI7ANISRrc9bBCU98solEuEWXLXdN8ae0b5DX4=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:23:95:37:41:03:6c:ee:df:e5:b4:2e:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=ceb6f4bbbf32f49279b92290be237465ce2bb82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:3e:06:47:1b:f7:4f:a5:cf:e6:fd:26:d2:
c8:4a:c6:7b:8f:5c:1e:1a:c5:e7:db:ce:46:c6:69:
4c:24:b8:de:71:f3:cc:ac:b5:78:70:28:46:e5:a2:
65:ed:71:06:e2:8d:26:87:62:e2:c8:92:fa:c5:12:
69:79:86:50:55:16:b6:53:d8:4d:90:86:15:14:9f:
0a:eb:e7:81:8e:e2:70:61:dd:ef:be:4b:08:33:9d:
a2:16:27:e0:69:ec:80:49:15:88:36:f7:89:73:54:
c1:37:d3:cf:4f:8d:83:ab:a5:a3:a7:54:3d:8c:02:
dd:06:73:f7:c4:01:03:a9:71:99:69:fb:26:80:7b:
ad:9b:35:ce:d4:b3:fe:42:4e:7c:53:2e:b7:b4:d9:
b0:54:ee:9d:9d:64:f9:ac:6a:16:26:25:85:0a:88:
2e:cd:fb:20:66:3d:8b:5d:72:76:40:6f:1c:59:3e:
6a:8c:70:e9:19:22:97:4e:2c:d1:69:34:ec:39:2f:
02:ff:f7:b9:91:27:61:82:e6:a8:5d:4f:85:d4:34:
70:8b:8c:e0:05:22:2f:6c:3a:cc:f3:05:b6:17:7f:
9b:2f:97:8f:83:ed:f4:ca:76:35:ce:44:6d:32:2d:
f3:3e:4a:a1:69:53:76:5d:f9:92:7c:ea:45:c6:96:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:F4:BB:BF:32:F4:92:79:B9:22:90:BE:23:74:65:CE:2B:B8:2B
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a6:94:b4:c7:e9:ad:ba:be:a3:1a:9a:cd:84:af:be:85:05:
1f:4f:65:27:63:ed:af:8e:14:58:e2:68:c7:c8:bf:5d:0b:6c:
e3:77:85:35:5e:59:df:5a:9d:e3:26:b7:02:2c:c7:3f:d5:e0:
5c:03:eb:9a:ec:46:74:e6:ab:32:50:98:0f:5a:a4:d7:4c:08:
8e:c4:3d:a7:b1:53:24:c8:50:15:6e:45:94:66:e7:85:8b:68:
b1:d3:25:94:c2:64:b7:5f:4c:a9:57:1e:cc:2f:0d:a5:b8:64:
43:f0:24:cd:59:7d:06:40:f5:50:f2:68:55:6d:77:61:f6:a0:
23:8b:a1:3e:97:43:3d:ff:1e:d2:7e:03:21:fb:66:b9:de:78:
fc:4d:c8:c9:ee:30:b6:34:4b:7d:3d:fb:96:af:8b:32:76:77:
a8:10:c4:c6:25:63:99:83:85:be:ad:67:ef:07:b6:d1:88:c1:
f8:87:dc:6a:b8:81:87:56:04:cd:6a:d8:4a:b7:ea:5e:2f:2b:
2a:48:f6:5b:63:e5:3d:43:f2:08:a1:63:5d:1e:ba:ce:e1:26:
5d:4a:8b:3c:22:f3:e6:73:ed:65:b6:ea:f1:80:6a:57:b9:8d:
62:fc:45:4b:6e:80:93:e5:27:2e:90:d3:29:17:9f:65:e1:8b:
09:5c:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:08 2025 by rpki-client