Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: UtfbtBr1WcNRfqvEx//5u0IoKBBuY+sikjvXRUCZYlw=
Subject key identifier: A1:BB:97:DC:24:4B:DC:A0:1D:9D:DA:7E:4E:8D:35:81:6E:0F:25:6C
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0198D472C3BD9CD146339A0F5FC752E4E399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0D7F
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: 2kk6lQEj0R/2FfsOrRsVvDRsQyfo2ybNBO7mQ3I56mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c3:bd:9c:d1:46:33:9a:0f:5f:c7:52:e4:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=a1bb97dc244bdca01d9dda7e4e8d35816e0f256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:39:df:4a:a0:62:05:f8:3b:c9:ab:b5:b7:
11:79:41:d5:d9:46:60:d7:4f:a3:bb:4e:74:9b:a6:
6a:4f:39:3c:43:eb:17:65:d1:2f:c9:db:a0:ca:70:
ea:1c:3f:3c:60:5d:69:be:0a:a2:26:32:8f:97:8b:
48:d3:98:3c:74:ea:18:a0:f1:2d:e7:33:20:7a:a4:
3c:5c:d5:21:91:1e:93:86:97:59:ba:26:b6:35:10:
cd:5f:8e:e7:ae:13:59:09:59:04:c5:75:29:77:12:
76:ff:9a:61:16:c8:23:99:03:a3:3f:52:0c:fb:bf:
60:89:62:91:e4:30:22:b0:2d:2a:1b:40:b1:51:d4:
17:ac:ef:57:d2:6b:28:95:ac:ca:e3:de:0b:91:11:
19:a8:4d:e9:4b:53:08:67:d3:7d:52:70:f8:78:f4:
eb:2e:9c:b0:4f:18:f9:20:08:07:da:d1:96:4e:1f:
b9:4b:99:c0:5f:a0:38:8a:59:54:10:62:09:32:e9:
35:57:49:7d:05:d0:4f:1a:1a:cf:09:d3:ac:42:1b:
97:99:f3:00:d3:78:3e:fe:e9:43:3a:71:49:a8:06:
25:f8:28:1c:c0:00:f1:95:69:91:09:63:67:5a:d8:
a9:9e:24:62:eb:e5:1a:2e:25:a6:01:38:da:11:31:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BB:97:DC:24:4B:DC:A0:1D:9D:DA:7E:4E:8D:35:81:6E:0F:25:6C
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:67:66:01:e0:0e:80:58:8e:eb:f6:1f:c7:8b:44:fb:01:00:
2b:ee:99:cf:60:ea:61:f3:2f:cc:b5:50:07:1f:97:55:95:cb:
3f:30:e4:36:1c:e3:93:2c:f4:3b:50:ac:4a:63:b5:6e:86:7d:
94:3f:f1:c1:9a:91:80:dc:46:1b:75:f0:12:98:49:bd:e8:7e:
34:73:5e:95:68:7c:83:5b:5a:8b:47:55:1c:3f:84:8f:ab:e3:
44:70:ad:5e:38:cd:93:bd:af:90:92:af:f1:78:fe:53:bb:2c:
fa:52:79:b7:87:bd:f5:18:12:cb:1a:96:93:9f:a6:f8:bf:ab:
e9:55:3c:22:53:f4:de:61:6a:c5:3e:8e:48:0b:17:19:b0:02:
be:70:a3:ec:40:aa:c1:a2:8e:22:f8:d8:46:67:d2:06:57:f7:
51:24:31:dd:11:9d:99:f4:f6:54:8a:a9:03:cf:56:d3:07:bb:
5a:03:db:09:f2:6c:d1:b7:27:f7:57:15:30:52:06:b2:78:9c:
7a:40:c3:9d:8a:ff:0d:cf:ea:c7:fd:5f:de:a9:1e:cc:62:a7:
08:d7:79:a0:c7:6f:4d:3e:b0:b7:c5:3a:03:bd:14:f6:b3:fa:
64:b9:61:f2:4d:8d:1f:c9:6c:d8:db:5f:cf:8f:2b:56:59:22:
5d:4b:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:57 2025 by rpki-client