Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: pDWL7uAVVqinPQHqPwDznLW9yFl/06MbceUDPXxrsyQ=
Subject key identifier: 84:88:D8:2C:33:D1:45:ED:7B:C8:27:7A:C3:74:C0:A4:87:9B:D1:71
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 0198D65FF6FE8BD733B3C20AAA9B68F9767A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0F75
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: zgO16cdhG6wfk1WCs8zhFHj27IeJ3wDTDhHVNFc1nQk=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f6:fe:8b:d7:33:b3:c2:0a:aa:9b:68:f9:76:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=8488d82c33d145ed7bc8277ac374c0a4879bd171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:2a:bb:ca:b2:91:3b:5b:69:39:16:56:38:
bd:3f:98:c0:0c:91:89:67:ce:76:91:76:f7:c9:00:
9f:b1:c0:1d:36:d8:f9:85:fe:2b:d4:8f:6c:64:6a:
56:bc:c7:6c:cc:c4:ba:c8:e1:c2:46:b6:5b:bc:a6:
aa:60:32:5c:5f:ee:50:bf:c7:1e:7a:a9:0b:47:bb:
63:96:ce:2a:9d:90:c2:50:3e:8e:97:14:f6:89:a6:
f3:f2:3b:b8:c9:37:5b:2e:bc:71:0f:ca:69:30:39:
f5:1e:91:03:ba:22:b0:77:2e:88:a4:05:c6:78:17:
ce:67:62:89:42:84:3f:be:d0:5c:4a:fd:e8:4c:5b:
23:b7:cb:3a:64:57:87:98:3b:ca:c6:1a:5f:c1:a6:
80:33:44:d1:e2:cb:6b:b3:43:78:2c:bf:62:be:ed:
e1:6a:4e:5a:39:0c:b9:33:10:78:d1:80:56:a0:60:
2c:4e:bf:0c:85:f3:e6:a2:f6:ce:10:fb:04:d5:7b:
88:14:68:4d:39:69:d5:74:07:ea:69:43:05:d5:d4:
2f:d1:a9:9d:35:b8:cb:20:4f:4c:b7:a5:4d:9f:7d:
e9:f2:7a:5f:9f:b8:39:e9:47:2b:61:44:20:7f:fb:
2c:cb:80:da:56:36:a8:6c:0c:fc:26:2f:11:3f:83:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:D8:2C:33:D1:45:ED:7B:C8:27:7A:C3:74:C0:A4:87:9B:D1:71
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:78:5d:1c:52:0c:c7:bf:6e:9b:19:25:1d:fa:be:cb:c3:
c4:9f:44:d2:ac:9b:a5:45:2b:66:3f:25:02:45:b5:65:da:66:
f3:c7:e8:a5:44:12:10:28:de:81:32:78:01:e2:ad:bb:e5:d3:
ae:a5:47:7d:7b:7d:40:51:73:af:1b:21:9b:4a:44:c9:25:aa:
f9:24:cb:5b:21:0d:1f:b2:68:12:35:37:cc:dd:76:60:af:9f:
c4:c2:cf:16:27:1c:a8:9f:de:fe:7e:6d:c0:e7:a4:d0:15:97:
ce:0a:d0:36:30:fd:c9:33:29:99:95:21:b6:80:f1:c3:4d:ce:
7e:6d:74:f4:86:69:c5:81:7a:65:d6:fe:42:06:3c:7c:32:26:
7a:a4:3d:72:14:a7:55:e3:c8:a5:54:20:92:eb:c3:bf:19:91:
13:91:3c:4a:3d:86:d5:47:ed:d5:5a:31:16:a3:39:da:88:45:
33:fb:97:a3:b9:89:a4:8b:cd:c9:60:c7:c8:ab:09:be:3b:56:
d7:26:d9:8c:4d:0f:4d:c5:55:71:af:95:4b:9c:01:e2:e1:c4:
ff:96:69:e9:64:90:8d:71:b9:e0:69:17:cb:96:88:5e:fe:b3:
27:d1:61:ed:5a:93:ba:ee:0e:34:01:39:4f:ba:5e:56:fc:3f:
8b:02:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:49 2025 by rpki-client