Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: DvYkvDckBBuJiSo3WibUIwbpabN15PgbAvuS9L/llWk=
Subject key identifier: BE:BC:39:AA:52:B3:3A:B1:3F:14:38:A2:4E:EC:C7:5A:43:62:06:23
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 0198D4E07AF12DB4C99C30A3A150A36B5970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: IG7YWbkpbbMCSzgUDKPiB+jv7i5pXxbflQQcAi6JTjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7a:f1:2d:b4:c9:9c:30:a3:a1:50:a3:6b:59:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=bebc39aa52b33ab13f1438a24eecc75a43620623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:10:eb:4f:79:93:2d:71:bc:e6:4c:11:3f:
12:26:43:d9:16:47:ba:30:66:7a:2c:87:15:1b:90:
94:5d:49:80:6e:1c:56:3a:a6:9c:7d:88:58:f1:c3:
16:7b:05:1f:c7:18:c9:6a:72:a9:ec:32:10:3f:1b:
47:d6:e6:ba:f5:f5:29:ce:77:0c:15:e2:8d:07:7b:
de:4f:1a:91:2b:82:e1:41:79:c4:99:bf:a8:f7:35:
fc:12:65:06:c4:ef:cf:72:a9:f4:8d:10:0c:2e:c1:
24:9b:83:3b:6b:a5:78:52:45:c0:95:fd:27:c9:62:
53:c4:d2:70:d8:b2:cb:e9:30:56:c8:3d:83:70:bf:
b9:54:02:5d:52:ea:3a:4f:42:a6:6c:e7:14:ed:0a:
06:40:9a:5b:36:1d:8b:cb:c7:e7:a9:55:25:7c:dc:
44:71:7f:db:87:f5:1f:b5:6b:e2:50:39:66:a9:cb:
1d:a1:6e:6c:62:c7:98:b0:be:5f:32:55:76:15:7f:
f4:07:be:3f:29:24:16:4e:51:13:1b:8d:bd:fd:fa:
ae:3c:24:77:7b:13:d5:2f:ec:c7:e8:58:4e:fc:fc:
33:6e:10:96:07:09:1f:0d:c6:84:54:1d:03:65:d3:
3a:81:64:b6:c5:85:25:4e:b3:b3:01:21:21:fd:90:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:39:AA:52:B3:3A:B1:3F:14:38:A2:4E:EC:C7:5A:43:62:06:23
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:ff:68:48:f6:43:02:bc:6a:a6:84:a2:77:d9:48:e0:19:
ef:3a:5a:3f:3d:1a:7c:e4:4d:9c:fb:28:13:ce:15:63:18:8d:
c7:f2:08:c3:aa:a6:88:d7:91:a7:8a:5a:eb:d5:da:a0:b4:58:
ea:f5:80:fe:c6:f3:8d:3a:62:7c:6d:67:81:5c:2d:6c:14:3d:
e7:15:0f:cd:25:83:af:66:87:33:df:02:d8:be:06:b7:ac:95:
4b:67:b1:4d:11:05:7c:95:eb:a4:e9:ef:03:86:5d:df:63:41:
f4:ec:e2:65:9a:fa:2e:66:92:e7:d8:4a:e1:56:03:bb:d2:83:
b4:c4:09:24:57:96:c7:94:d9:cc:c9:1f:70:ce:1c:ce:a9:82:
45:b2:83:c7:f9:68:91:7d:02:6c:b5:1e:4b:09:f7:f0:d5:78:
64:d4:8e:ee:73:ac:a3:a4:b2:11:41:0a:1a:b7:e8:33:12:1c:
12:ae:08:cd:82:91:45:a4:b0:9f:4a:cb:6a:8c:cd:0c:9f:b6:
65:e6:c2:ba:92:88:3a:86:34:a4:c9:4e:1e:4a:1e:10:60:80:
66:ee:dc:ae:96:48:5f:73:a1:ee:9c:82:03:7f:23:93:5f:d3:
b8:2a:9c:dc:2a:26:a3:94:4f:47:77:f0:4a:58:e1:aa:72:57:
ed:46:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:08 2025 by rpki-client