Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: GByymFc8hXde6L/4mXO0yTYbkBAcvrBArk/6muCjQ2k=
Subject key identifier: C6:63:E3:14:57:10:81:24:64:92:46:F5:73:4B:24:7B:36:AA:FF:AB
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 0198D7E18623ECDBC1E1C5A488844FC6B45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 17:02:17 +0000
Manifest this update: Sat 23 Aug 2025 17:02:17 +0000
Manifest next update: Sun 24 Aug 2025 17:02:17 +0000
Files and hashes: 1: RUQaxYKvLWtplW7yHI6TR3XEkQE.roa (hash: XDQ+7CQl5GASmirk7HcC4w80DGZtYXJDshkFg3byREs=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: A/au6uXvNrJ42pL1kDNeda9PooeHaKBuTRTBm3qyya0=)
3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:86:23:ec:db:c1:e1:c5:a4:88:84:4f:c6:b4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Aug 23 17:02:17 2025 GMT
Not After : Aug 24 17:02:17 2025 GMT
Subject: CN=c663e31457108124649246f5734b247b36aaffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:99:ac:8a:14:be:6c:dc:14:58:16:4c:d5:
cf:62:1e:ec:ac:30:5b:86:39:7f:29:2c:5f:9f:dd:
cd:92:b7:fa:7c:48:09:f5:7e:2c:d5:7c:e3:88:74:
e5:5b:45:d7:ae:b3:bb:e4:20:70:78:07:bf:a7:62:
17:d7:73:ac:0f:e1:93:f6:86:56:26:29:2c:8c:9d:
1e:cc:7c:f1:45:2a:72:7e:ad:43:f1:80:65:73:ef:
6e:98:e6:7a:70:46:a1:e7:f9:90:75:6c:a3:58:9c:
16:61:86:97:88:ce:24:6e:b3:5b:11:09:c2:70:92:
41:63:80:81:3f:ae:b7:68:f8:cc:a3:9e:22:be:d6:
01:49:38:75:aa:19:0b:5a:0a:1e:c0:2e:5a:61:00:
06:92:af:c2:f5:e3:3e:0b:5c:71:19:58:99:2e:1d:
b3:36:3e:b0:8b:b2:86:70:0d:3b:d4:58:7b:80:3b:
b6:e8:71:d7:85:46:27:15:61:7d:55:e2:11:d4:46:
c0:6c:e6:f5:8f:b0:8f:0c:35:2a:e7:ed:9a:3c:8a:
58:83:1a:14:d2:95:e1:a8:a3:64:37:75:78:62:7c:
8f:e7:3e:0b:a7:d8:0b:b7:66:30:0a:bf:85:89:77:
85:1b:16:12:d9:fe:ce:1c:a1:7b:a4:ed:34:a4:88:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:E3:14:57:10:81:24:64:92:46:F5:73:4B:24:7B:36:AA:FF:AB
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:f8:1e:5c:0b:33:c6:b6:34:e4:9b:e1:f1:d6:6a:4b:81:
ec:d7:bc:39:b9:3f:e2:58:89:bc:80:12:bb:8c:e4:85:05:f9:
4a:51:71:98:bd:85:de:5e:d7:46:1a:41:48:e9:b4:b2:e9:93:
dd:20:3b:6a:63:9c:56:4b:1a:d3:22:3b:b6:b9:78:53:10:e7:
82:51:14:10:e3:a7:27:c9:30:eb:e0:cd:da:17:de:61:a4:fd:
41:c5:02:e9:35:21:7b:eb:49:91:27:df:be:97:ee:83:05:9c:
f6:e3:b2:19:6f:e2:86:bf:5e:b0:a7:77:2c:d5:a2:60:77:9f:
e4:05:f0:3a:d5:6f:ea:7d:52:37:b1:57:04:61:93:38:c5:aa:
59:a9:c4:1b:e7:a6:22:e6:9f:1a:4c:84:a5:fb:90:61:bd:75:
5c:4e:82:3c:f0:15:5c:6c:c4:02:d9:7a:64:44:8c:45:46:e1:
ae:3b:df:4d:76:f2:6a:06:01:ca:82:18:1e:4f:36:d6:4c:fb:
8b:63:82:55:3a:65:26:62:9f:af:3f:29:0e:32:d1:2d:a9:d4:
0c:73:b1:52:af:cc:96:08:68:f8:cb:04:8f:f1:a3:02:7f:a8:
a7:c3:e6:e4:07:95:d6:cd:b6:99:90:4d:47:d8:9f:d3:12:b4:
4f:30:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:03 2025 by rpki-client