Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: aILSNXiAFCWoZC3e4OjyB/nKwNfQD0UNqq9fTRokdAE=
Subject key identifier: 41:69:D8:27:0E:0E:FC:AF:06:91:B0:5D:CA:26:76:DB:75:4E:7C:0B
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 0198D515D2E6F55AD588939E28C78360C022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 14EA
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: 3gYrrBk3r06nH54hGQfDdPMHk2S+60JW9ByK3iBLqBM=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d2:e6:f5:5a:d5:88:93:9e:28:c7:83:60:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=4169d8270e0efcaf0691b05dca2676db754e7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:f4:5f:ec:6b:a8:45:a3:03:56:d3:ef:93:
7f:60:a6:cd:23:db:47:e5:e2:13:ae:19:da:50:36:
c9:0a:17:af:af:e6:fb:33:5a:a0:fa:f1:35:90:70:
94:9a:5d:18:bb:44:c8:5e:46:00:9d:32:d4:5d:40:
8d:7e:75:7a:a5:07:94:b8:55:2d:93:df:34:a2:b4:
72:62:53:b6:ae:e6:0c:82:3e:9e:64:3a:16:9f:cd:
0a:a1:05:f5:92:ba:e9:1d:27:8d:34:8d:e0:45:4c:
06:e5:23:66:ec:3f:94:4a:ff:7d:6f:68:4d:b9:6d:
d5:f9:b9:cd:7f:a2:51:7f:b0:ea:d4:cb:5f:c8:ba:
4f:c0:9e:df:90:bb:fb:34:12:52:66:8b:a9:63:f3:
08:6f:8a:13:9f:5c:78:bf:c3:ef:1e:22:34:cb:9b:
b0:d5:9e:3e:99:d2:ee:6a:54:a6:31:f1:0c:7d:41:
f0:0f:34:17:54:0d:06:24:b7:4d:b5:1b:97:f2:5c:
66:a0:a0:b5:53:47:00:0e:08:a5:10:8a:a9:91:9d:
1f:d9:e3:2f:4a:0f:88:f3:77:54:92:55:16:e0:7c:
1f:69:18:4f:a8:20:85:84:3c:61:e9:f7:69:01:3a:
f1:35:c1:10:b0:97:af:64:54:7a:7d:e7:dd:59:b9:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:D8:27:0E:0E:FC:AF:06:91:B0:5D:CA:26:76:DB:75:4E:7C:0B
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:dd:d4:0f:f9:7b:c8:2b:0d:81:67:76:5c:82:be:34:39:
8a:07:ec:e2:b3:33:af:5d:89:1d:26:37:88:9f:e3:6c:61:77:
01:9b:7f:d1:a5:c4:9c:22:55:28:96:98:62:57:54:24:cb:55:
e3:84:95:84:11:da:68:e5:0c:7a:a5:83:09:d7:c3:ab:7c:f2:
a3:16:38:ba:b0:cf:bf:86:4c:f3:e3:71:2d:f4:f2:db:ff:b9:
85:6e:90:ed:66:06:f0:3e:99:e2:dd:34:6d:ec:36:d1:4c:a4:
38:4a:9e:02:47:aa:ce:bc:99:03:c3:f3:28:9f:02:0d:48:3a:
51:bf:de:b2:15:54:e5:04:7f:68:a7:d1:d1:93:29:a4:d3:03:
a9:05:5d:81:8b:cf:2d:d0:c2:ae:43:24:e0:90:ca:d3:f2:23:
b5:41:94:c2:04:d2:00:4e:e0:a1:a8:f4:a1:cf:01:35:5d:7f:
74:eb:b7:e4:69:3b:57:aa:fc:8b:1c:ea:d4:34:54:a8:99:6e:
53:59:6b:75:ee:a5:c3:24:3f:96:fe:15:6e:46:c8:70:e7:2e:
20:11:60:db:1a:99:57:ac:c1:80:de:0d:3c:08:31:33:70:f4:
27:58:99:2b:73:a5:f3:78:96:bd:66:84:3b:b4:2e:51:78:cc:
26:a3:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:51 2025 by rpki-client