Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: g1rFni53INBYY60E4ui5mJCFkU038e3QhxqJhkc0Dck=
Subject key identifier: 25:9B:87:1B:56:48:36:29:B8:4C:8B:5D:0D:96:06:E8:53:5A:51:EB
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0198D54DD501D8871A37A6A4353E78B39447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: /j6lKgtV42uldDXpDY0yC0W9H8Dq2g3as/mQPsHYzxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d5:01:d8:87:1a:37:a6:a4:35:3e:78:b3:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=259b871b56483629b84c8b5d0d9606e8535a51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:df:7b:f3:54:0d:a6:91:17:9f:6c:0f:78:
6c:cf:c2:60:c4:00:d0:6d:a7:be:83:b4:0e:f5:23:
9c:d4:19:97:35:3b:5b:48:94:17:5f:d7:4c:87:24:
8c:68:9a:39:1e:4a:a9:a1:de:80:c4:a2:51:64:5f:
72:a6:cb:0c:16:a9:48:88:e1:c6:5e:04:d9:d4:a5:
e2:40:ad:8c:f0:66:a6:41:00:86:e5:2c:bf:b4:e2:
3c:55:1b:48:9d:6e:ea:ee:cb:b7:aa:41:d8:b0:a8:
d0:66:83:ba:58:75:d8:b5:3d:71:a1:3b:b4:71:a7:
28:17:3e:06:37:4b:9f:d3:ff:19:e9:e6:0a:b9:72:
e0:1f:1f:fd:c4:98:b3:75:71:c4:fe:57:1f:1b:8e:
49:2d:a7:80:b0:88:03:81:0e:f3:eb:25:87:f7:b2:
22:44:cb:97:bc:dc:56:b6:fd:d9:31:e5:0b:30:d8:
b1:e1:ab:8a:e7:96:b5:56:af:f8:b9:e2:5a:fb:6d:
f3:50:a8:b0:30:20:a3:02:4c:da:0b:81:3a:71:ef:
5d:3a:85:e8:bd:ed:26:dc:c7:01:1a:52:27:c8:b0:
68:fe:4e:fa:44:9d:18:05:64:5c:71:d7:8b:89:2d:
59:a6:cc:bb:33:cd:6e:c4:18:98:af:ed:e8:54:14:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:87:1B:56:48:36:29:B8:4C:8B:5D:0D:96:06:E8:53:5A:51:EB
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:30:4e:12:7b:70:26:02:2c:ce:c6:06:46:86:9f:3f:8e:
76:19:aa:fc:dc:d6:f4:cd:0e:04:0b:18:86:81:70:b2:2f:ae:
0e:74:9b:b1:ec:12:c6:82:66:13:3e:37:ba:01:b1:51:c0:69:
32:96:df:66:ef:13:b3:b0:c7:9d:51:24:c4:d3:96:1d:ec:ec:
c1:ff:fe:d8:f0:ec:d8:7f:49:0b:03:4d:93:ec:fb:d7:3f:f5:
73:d9:f1:58:11:51:c6:d9:70:50:d5:74:43:bf:a2:f7:a9:5d:
24:0f:d1:68:d9:51:79:c5:a4:f6:44:56:bc:9e:77:bf:f7:36:
d7:70:f5:80:a8:f5:ce:9f:c6:bd:4c:bc:fb:d7:9d:fc:75:fb:
fe:36:a4:62:b0:1d:d7:ef:e2:f6:54:bc:ce:4e:74:29:57:b3:
f2:36:c4:50:17:f9:17:4c:6d:a0:15:d2:df:00:b0:7b:92:eb:
9a:5e:88:1d:5b:6e:91:e6:34:76:91:95:66:d1:bf:2d:47:2d:
69:8b:b2:35:00:5a:e9:aa:d6:5c:4a:61:09:4b:c0:95:bb:e8:
bf:8f:5c:c3:10:41:63:8c:29:c8:89:77:45:aa:a4:09:d1:f4:
9e:60:30:59:24:a5:3b:dd:c2:69:a4:3d:06:42:61:c8:a5:d3:
41:c0:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:41 2025 by rpki-client