Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: Rs0BFhIhaefHf/qbIBTODthO2HMvJjrMPNPJTZA0+nU=
Subject key identifier: E5:87:98:78:A8:71:02:3A:92:62:13:CE:5D:10:43:9D:7D:8F:10:E7
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0198D583A32CA7BE7CC347A03FBA980CC91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 06A1
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: sswid0d0Uw_PWJ1frEM6ZAUSdPo.roa (hash: XrnoHPnVV/5gfAThm6yZOO1oCNAu2B9VGffB8MJpkQ0=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: iYE9kyV3jNbXFl/RPh3jAqJh1r5uo5QLJCRKwjE2CUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a3:2c:a7:be:7c:c3:47:a0:3f:ba:98:0c:c9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=e5879878a871023a926213ce5d10439d7d8f10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:8d:97:4c:8b:af:bc:ca:e3:1e:49:32:2a:
64:b7:c8:20:2f:a6:30:bb:31:b5:3b:82:6e:89:2b:
dc:fc:65:93:c1:d2:69:68:33:c7:1c:98:3a:0f:05:
1c:87:5b:3c:9f:0e:63:91:d0:92:42:49:63:f6:65:
31:7f:e7:65:88:2f:16:f6:6d:95:04:ca:50:e9:b3:
67:99:77:66:d4:10:89:71:c5:e2:01:6d:ff:6a:b3:
94:ce:0e:12:5c:d2:8d:f4:35:ff:3b:55:ba:2f:1b:
36:3c:10:2f:93:9b:b9:7f:6f:f8:49:b8:38:91:0f:
d2:a5:72:6b:51:65:21:9b:49:bf:c0:22:a9:7d:35:
be:be:23:70:4d:21:6c:1e:c5:bc:c9:22:d2:13:f9:
7e:01:3a:b8:b9:bc:7f:d5:9b:56:81:c5:05:ec:0f:
b0:24:27:b2:bb:62:1e:5a:a4:04:ae:12:d2:80:51:
47:84:cd:5a:bb:35:fb:c7:7e:f7:b8:97:24:d4:1c:
7c:35:6d:24:0e:7e:f2:b5:43:87:36:29:3e:4f:d3:
63:06:eb:c1:96:36:a2:da:c6:bd:46:64:43:b2:8b:
df:2e:25:a5:04:49:9e:92:f8:4d:71:95:65:c0:7d:
ea:34:7d:fc:a9:de:0f:cd:69:16:12:eb:88:70:7f:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:98:78:A8:71:02:3A:92:62:13:CE:5D:10:43:9D:7D:8F:10:E7
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:23:2f:4e:ef:4b:66:bf:32:d2:c6:58:72:74:e2:81:1c:2e:
b6:1a:e0:d1:d8:db:6f:e9:68:cc:d3:05:de:07:05:5e:70:a7:
20:63:03:04:6d:cb:87:b4:68:55:7e:ff:ff:ee:8a:6a:f5:cd:
ce:10:10:42:88:a2:8a:ff:49:a4:dd:b6:9f:be:88:47:a3:48:
fd:42:62:c5:cd:8c:86:33:d1:b4:dc:3d:b0:2f:21:a5:0e:42:
6e:35:a3:22:a1:52:0c:fc:6a:71:e0:5c:d5:8a:89:7b:48:3f:
56:e2:a6:51:ca:e0:c5:f1:a4:ef:0a:59:8e:68:8c:f8:4c:2c:
06:fd:e7:d5:84:c5:c4:ab:49:29:7a:29:94:66:4e:8b:08:24:
41:a3:d3:07:1e:1c:fc:2f:1a:fd:d7:64:0e:06:67:31:14:aa:
ae:d1:0b:ea:bc:39:55:ed:70:bc:07:45:e8:5b:b4:51:0b:f1:
b7:65:3c:18:bb:e7:87:dc:1f:fb:08:14:4e:97:62:62:1c:59:
da:10:49:63:3b:57:33:8d:1f:02:ca:c5:a3:9a:b5:55:83:35:
95:47:9a:df:bf:77:07:0f:a9:f0:77:ed:3d:3a:b8:2a:45:21:
c6:24:5f:06:ef:40:ff:25:e8:6e:b0:98:f9:e5:2c:3f:47:74:
1f:56:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:02 2025 by rpki-client