Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
File: uT2pHx9TY0JyxZEQh85my602FKM.mft (raw, json)
Hash identifier: xaV7CsPz8THfmxvw8vBwkRyPt/kp/g+3tfqh6V/6jwA=
Subject key identifier: B1:F2:88:16:57:06:E3:C0:BF:57:6E:1D:5D:62:C7:C7:20:F6:CA:91
Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
Certificate issuer: /CN=b93da91f1f53634272c5911087ce66cbad3614a3
Certificate serial: 0198D6604F08A264D872A86D7C8A04CA0508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
Manifest number: 07E8
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: 0386LGj4Sidbyca8KneFkNR54TI.roa (hash: jcV5FqK/anJpS83+3AC/ntYQGRcWnZsS3JRi5ZH9EXg=)
2: uT2pHx9TY0JyxZEQh85my602FKM.crl (hash: xf+70VSRrVZsMR4E+MHOiUj4MyyNn6ZaxQe/hU7apFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:08:a2:64:d8:72:a8:6d:7c:8a:04:ca:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=b1f288165706e3c0bf576e1d5d62c7c720f6ca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:79:9b:b9:21:17:70:6a:12:cd:17:32:e7:
b0:ed:c8:ab:32:57:55:a4:c3:d0:72:fb:a6:88:4b:
23:68:4c:43:d2:bc:93:4e:56:bf:f8:df:0e:f0:25:
17:96:e7:be:4c:57:37:8a:6a:c9:1c:57:94:a4:60:
2e:57:0d:64:31:27:bb:7b:5d:6f:e0:cb:49:14:57:
c4:01:bc:e2:a3:91:54:4f:09:5b:e2:1a:7f:38:d9:
f7:dd:8c:96:39:a7:66:6c:64:59:46:9c:58:e1:86:
8d:e6:1d:30:36:1f:26:60:d2:11:e2:c1:ee:fe:ce:
02:2a:b9:78:51:43:25:f4:47:9e:43:25:97:12:95:
37:1f:9b:8e:3b:51:6b:f7:96:49:56:51:b5:bd:bb:
aa:dd:46:0b:6e:18:20:01:6a:86:26:a3:f9:80:9b:
dc:b4:cb:5c:dd:db:dd:13:c0:a5:74:ac:49:d9:45:
4f:6b:fa:cd:88:72:6d:85:df:15:6f:9f:2f:e9:a8:
f8:44:5d:14:92:c2:1b:59:e9:29:19:8b:3f:be:d8:
e5:ef:c5:55:d3:21:04:59:72:04:08:e6:90:d8:ee:
81:4c:bc:cc:5f:f4:d0:ae:7e:d5:47:ff:b7:c9:9a:
24:1c:2d:2a:c9:75:b1:6a:3d:da:d1:28:8a:02:e7:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F2:88:16:57:06:E3:C0:BF:57:6E:1D:5D:62:C7:C7:20:F6:CA:91
X509v3 Authority Key Identifier:
keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:9c:a4:b6:e6:ce:4a:49:48:d9:00:b7:46:94:46:c0:4d:
f7:66:2d:fb:4a:35:7a:b7:31:cd:81:c5:0b:a4:b4:11:fc:d4:
a3:fc:15:79:ee:d3:66:72:37:dd:63:73:e8:58:91:46:d6:d7:
29:a4:b3:65:1c:46:ea:df:a2:f7:90:05:27:b5:d4:c6:fd:5c:
79:c9:f6:15:ec:e8:17:38:b5:f3:f8:6d:c4:d1:77:0f:a6:54:
94:9a:e7:cb:46:b7:c5:68:7e:49:df:e7:f7:fb:5b:fb:fb:c5:
34:79:4e:05:ef:a2:04:03:b2:59:4f:35:11:84:f2:d6:4c:62:
28:33:b7:a6:db:6c:e2:1d:a7:16:bf:a7:bb:48:31:70:8c:1a:
78:66:49:df:59:d8:3c:8e:e8:9f:45:e1:72:86:5c:77:82:75:
37:9a:d1:d5:16:d9:25:75:b1:09:86:5f:9c:16:83:00:95:fb:
5e:25:cb:f5:cc:87:53:1a:ce:20:1b:78:ce:b7:92:af:b3:51:
7e:8a:23:1f:9d:57:f2:70:44:03:be:50:9a:6e:01:9b:0b:78:
33:6f:3f:2d:08:6f:e1:04:8e:fd:b7:ce:5b:ff:09:c3:da:62:
fb:d6:4f:48:09:d0:ae:78:be:84:c5:c7:7a:6b:e6:26:03:a6:
8c:d3:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:02 2025 by rpki-client