Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: +/WEl9BZCHK8fNYPFiMBt76gUVrAS2jI5w0++YUnDrY=
Subject key identifier: A2:A8:E6:6B:3A:43:10:FD:6E:A3:C0:01:1F:FB:8E:99:D8:AD:09:04
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 0198D5159425C88D62D031D7EF7C04BFD431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 1454
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: dCuy/1yLaNWyWfGkzieLJYamMy/o3hQY8a6lNpOuWR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:94:25:c8:8d:62:d0:31:d7:ef:7c:04:bf:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=a2a8e66b3a4310fd6ea3c0011ffb8e99d8ad0904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:f0:e1:dc:9c:85:d3:6e:97:96:a4:e9:b5:
bc:c0:88:e3:f8:e3:1d:00:e7:ad:81:93:e2:b2:98:
c9:db:79:0b:e6:c0:06:4e:88:46:7c:f9:38:33:bf:
6c:4d:8a:65:05:99:f9:1b:60:27:f4:cf:34:b7:d9:
97:7d:0c:94:68:5a:9b:06:39:d9:b4:38:09:c8:42:
2e:a3:5e:66:ad:f3:e5:14:e8:54:81:59:06:d8:b3:
ac:b1:f9:84:db:e6:c1:07:6a:24:08:87:7d:21:1e:
b1:ac:59:b6:82:7f:7e:5d:a6:2b:fb:9e:2a:93:5a:
9b:9f:07:f6:0b:d6:cc:c5:21:09:8b:a8:a9:33:4d:
0c:27:b7:d4:dc:a5:d6:7d:a3:51:86:f1:b8:a7:ff:
cc:3e:6f:f7:a1:bd:94:eb:10:42:87:43:c7:d4:29:
26:da:52:30:4a:9e:de:1e:25:40:d6:a9:8a:9c:6c:
da:ad:68:42:d0:95:f0:b4:d0:f0:cd:05:91:a8:53:
ea:53:97:1a:af:3b:01:17:b8:c7:71:9d:d3:c2:9d:
77:ec:d1:42:ae:bd:86:82:9c:f3:56:c2:30:53:6a:
44:b7:ca:2c:2a:ba:01:15:c2:8b:ec:ee:d7:c2:c6:
b5:4e:b5:90:52:92:cf:d9:d0:2c:85:3c:99:a3:ef:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:E6:6B:3A:43:10:FD:6E:A3:C0:01:1F:FB:8E:99:D8:AD:09:04
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e4:57:c3:1e:da:46:72:71:c1:3d:c0:45:56:f8:b0:8d:f2:
f5:9b:f4:5d:af:53:2c:67:ee:00:88:25:3f:71:5a:38:7e:23:
f3:6c:47:14:a8:34:d2:c3:cb:fc:6b:db:4f:30:93:22:b0:b5:
ef:f6:bb:ec:f3:a3:e7:0c:24:ca:02:ae:3f:4e:f8:a7:51:9e:
1d:4e:74:c8:41:5a:a0:72:4d:2f:34:55:62:07:73:9f:22:ae:
af:30:75:26:cf:d1:13:73:65:44:c0:e8:58:73:f5:b6:55:34:
31:b3:95:ab:84:2f:2d:38:51:3f:a7:fd:06:55:21:52:74:fb:
3f:72:77:c2:5c:ec:3a:4e:05:62:a5:c1:39:4d:5c:a5:91:d0:
01:75:3c:87:b3:39:b9:df:09:94:17:97:1e:9a:d4:e7:9e:a9:
67:be:8c:40:4a:9c:ef:cd:42:04:ba:af:41:71:e9:5f:48:0a:
7e:62:d2:e9:1f:1c:90:fe:a1:4f:ca:35:74:b8:0b:f0:69:97:
e9:cb:7d:a0:31:b4:21:84:87:1e:e4:02:c3:df:bc:05:d2:cd:
b1:d9:8e:41:62:1c:3f:e0:30:12:0e:cf:d8:7a:8b:a8:4c:d3:
a0:98:ce:8a:38:7b:de:33:a6:4c:4c:5d:bd:09:4b:76:0e:ff:
2d:c2:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:22 2025 by rpki-client