Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: XO1/XEfEQs29bJuliNfE1foIy7kqyjQoRKgV4K9piFw=
Subject key identifier: B1:50:F5:C6:CA:10:44:F8:CE:C0:F4:FD:FA:82:1A:FA:80:F9:72:F8
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0198D515653435ED2E8062C7562FB2C34FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 077D
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
2: 4h30bA-3Y1NPkPR74l_37u6rDuA.roa (hash: 15ZRW34VHGvAg6aqavimaSzixrDnJDwBfZWzEHDaSjs=)
3: HPnvD8Ntnn9dO-DnJ5gUArgmEbQ.roa (hash: PZJg6QjLztAzWO75yUPx+H4icTDOlKmcYmBRQX4HD7k=)
4: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
5: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
6: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
7: buytX97WbFAYb_5j2H0YkO5IIjk.roa (hash: MQWcPEUZU7ucZLw/8SXvYxRLcudDsOAUxVnmSK3CJVo=)
8: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: z0iwgSVwPTIJ+TezWK+6n+WoT4I3jfINyA4G271bygM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:34:35:ed:2e:80:62:c7:56:2f:b2:c3:4f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=b150f5c6ca1044f8cec0f4fdfa821afa80f972f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:d5:3e:9e:80:37:48:16:ef:90:57:6f:b9:
7d:0c:5f:06:bb:0f:dd:ae:18:4d:e3:8a:c6:df:63:
7c:e9:30:66:03:71:c3:b7:f3:9b:df:50:29:2c:28:
f5:38:e8:12:0e:93:85:75:94:3f:36:bd:58:13:7b:
66:09:04:ec:b6:89:e1:16:3b:65:e3:d8:ea:f5:24:
84:fc:8e:db:22:67:86:2e:3e:0b:e5:c5:a7:6f:8a:
71:53:a3:78:92:18:49:32:d2:95:65:79:b9:dc:6f:
03:7e:2b:29:2e:06:f1:81:25:87:3b:dd:df:46:b5:
12:c1:24:75:2e:16:a1:c3:4b:28:f2:70:79:3e:14:
d0:70:6b:00:c6:07:53:f1:e0:dd:c0:15:45:d7:14:
ff:e0:21:d9:4f:2b:15:dd:c6:a4:28:06:41:c7:70:
10:bc:bd:3e:b9:33:f5:f1:c9:fc:db:e0:38:44:d4:
9c:a7:bf:9e:61:a5:d0:50:a4:00:7c:ba:39:23:f9:
ab:d8:73:ac:d1:56:94:96:fe:26:50:ba:45:27:b3:
e6:f8:23:14:89:56:ca:e8:5e:66:e9:dd:b2:a3:5b:
08:bb:17:da:8e:f1:1e:48:7a:71:bb:92:7c:b6:8f:
2a:20:13:ba:54:d1:e8:e4:2a:f5:e4:31:c5:42:2b:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:F5:C6:CA:10:44:F8:CE:C0:F4:FD:FA:82:1A:FA:80:F9:72:F8
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:ef:d9:c8:24:99:a2:da:ea:8c:5d:71:a8:0e:d2:1f:aa:
4b:7a:e2:de:4e:17:92:df:a1:f0:5c:b6:07:37:b9:ac:1f:9e:
8b:7e:80:a7:ce:11:52:c1:7f:ff:32:f2:d7:54:b3:b9:5f:55:
a0:b4:96:89:47:66:19:b5:77:bb:13:18:e2:4d:00:ed:97:5c:
49:64:8b:a2:a4:3e:9f:7e:cf:21:51:43:98:8c:78:e7:ac:5e:
87:61:7a:e9:e5:1a:d8:60:51:cb:e6:64:fd:47:2b:de:4a:8d:
e5:7b:30:ea:e4:cd:94:83:c4:5f:35:9e:08:a2:11:95:8f:ca:
46:52:7f:ac:aa:e8:76:4f:08:38:b1:76:c1:ca:21:1d:58:db:
64:f6:9a:ad:bc:60:72:45:ab:18:07:46:2b:f2:90:85:89:60:
e2:bd:24:81:50:5d:69:b1:9c:28:f3:be:cf:d3:e7:d1:59:e4:
37:58:46:29:dc:12:13:a4:62:cb:4c:20:ba:65:d6:a8:97:03:
89:ee:fb:e5:0e:7a:02:74:72:a6:3f:e7:2e:e1:74:9a:7b:82:
34:50:d6:f4:e7:7a:dc:48:01:d3:7e:f5:bf:67:28:ca:41:09:
e9:43:96:46:53:f0:54:52:b1:f6:9b:a8:a4:df:8b:52:b9:d7:
4b:28:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:30 2025 by rpki-client