
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: x0yhIiU6NI57e/tna0hFMd+mS/iS0Fj5aYwROASuBtg=
Subject key identifier: 6C:30:8E:D2:47:FC:21:C4:E7:A4:B1:6B:51:26:0A:A1:DB:3C:5B:E5
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0198D65F921E8FEF6023A4CBB43B23B58A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: CH3SHIALYQKjmb2zbj9vPRLOFxxm/VmdVyiGv2/pGN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:92:1e:8f:ef:60:23:a4:cb:b4:3b:23:b5:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=6c308ed247fc21c4e7a4b16b51260aa1db3c5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:2b:45:e5:c0:24:70:46:6e:3e:04:8d:08:
e9:ec:3c:6e:70:8b:86:de:9f:52:81:5a:b5:db:0a:
fc:4c:5d:d6:0b:a4:45:cf:87:ba:35:a6:fb:1f:a1:
b0:49:54:46:58:da:45:3c:7a:4b:f8:04:d1:8b:50:
87:5a:a7:00:c6:0a:98:d9:c2:c7:86:a6:6c:60:1c:
9f:52:8a:f9:01:30:ca:8d:5b:f0:94:31:51:04:db:
a1:aa:2e:9a:aa:25:3f:55:94:b4:74:aa:47:d6:08:
84:50:38:48:51:95:f2:bb:3b:b9:b6:7c:a3:8d:49:
d3:5d:a3:2a:3e:fd:be:68:bc:22:8f:1c:76:9f:2f:
2a:f6:71:00:a6:2c:27:1e:79:cc:8d:af:cb:b3:74:
24:ab:b7:50:6a:11:91:cc:57:a1:42:cc:37:c0:2f:
99:7a:8c:6f:02:95:fa:dc:eb:40:96:5a:be:ab:4a:
44:3e:88:85:bf:39:d0:1d:9f:03:f7:b4:3a:3f:0e:
f7:cc:9f:6c:9f:f6:c7:5d:74:28:b8:af:f9:5c:62:
f1:d8:8c:95:5e:e4:b8:da:85:9b:08:20:f4:87:46:
a9:27:cf:e4:62:1b:b4:9a:a4:7a:82:e5:ad:ef:29:
f8:ff:ca:d9:bb:8f:cb:1d:be:8c:51:65:8c:c7:09:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:8E:D2:47:FC:21:C4:E7:A4:B1:6B:51:26:0A:A1:DB:3C:5B:E5
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:44:2b:a1:45:f0:78:95:43:b2:7f:10:af:c3:c7:83:8c:82:
bb:52:f6:65:89:52:70:6d:d5:69:53:4d:bb:0e:c8:85:bc:95:
90:a4:49:9e:c1:ef:40:99:fd:c5:ec:58:e8:67:83:52:eb:4d:
78:bd:8f:ce:b8:0b:a6:bd:12:2c:fd:c4:82:d4:61:86:db:6f:
9d:98:da:d9:bd:8e:56:60:2a:d8:80:7a:d7:12:ff:2d:2a:00:
d7:52:70:f2:62:85:94:b1:06:42:fe:12:96:58:e0:47:e1:9a:
55:f6:00:47:57:7f:ce:f7:5e:e6:68:a7:47:14:73:5b:58:a3:
32:b1:b5:e1:c5:bf:1e:ce:cf:25:4e:ce:54:11:29:a5:8c:92:
ca:98:b7:23:ef:ea:bd:b2:d5:c0:6f:b9:94:f6:46:7a:a3:33:
29:a2:16:e8:93:e9:d4:1a:a5:cf:7b:93:26:c9:a3:85:d4:42:
11:86:64:68:b8:48:5a:05:47:02:5b:27:ed:18:ec:1b:58:88:
5b:55:f0:47:42:3a:28:94:cf:d1:dc:b7:54:a8:50:11:79:4c:
b8:5b:98:aa:f2:16:6a:4a:a5:af:20:10:a3:0c:0b:61:ee:28:
a1:d5:ff:d6:af:c5:2f:7e:2d:76:9a:8e:9b:eb:a4:74:df:07:
fb:f6:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:32 2025 by rpki-client