Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: SASLKDB9Au30kTeTvaftJaZkmp99KCqQ4zbVwMR3uDY=
Subject key identifier: C9:CD:E3:DB:83:63:16:E2:26:28:DF:A6:60:05:9C:02:46:97:D7:99
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 0198D698533452BA257C58E61514C569C35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: 6U0Jk9Eed7nJwdqRsoMsodIxJcZhMuSfDZ2+iXhqayw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:53:34:52:ba:25:7c:58:e6:15:14:c5:69:c3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=c9cde3db836316e22628dfa660059c024697d799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:3c:48:b1:6e:05:9f:d9:43:0d:06:d6:e6:
37:21:66:49:74:8f:7b:75:85:e2:8c:69:51:78:98:
68:2e:b6:15:8f:7a:c4:ba:18:6f:db:13:4a:f4:55:
77:0f:0c:fd:ae:59:11:ee:61:d2:dd:29:e8:7d:37:
d4:81:91:9a:a2:4c:76:3b:0e:0b:5d:ae:0d:9f:f1:
0c:96:36:f5:5c:65:aa:99:1c:22:8e:1c:e3:e3:e9:
55:5a:39:1f:4c:77:63:ae:68:99:54:3a:5d:6a:17:
44:e3:74:4a:b7:03:b4:2a:ae:a2:37:8c:28:5a:5f:
27:0b:d8:1b:9f:82:f4:20:ad:56:cf:58:a9:76:31:
bb:dc:4e:7a:f5:d1:0f:fe:c7:60:e2:d2:55:6f:fc:
e7:e9:4c:ec:34:20:b7:18:a7:c9:61:25:63:32:98:
e8:19:37:86:7d:45:28:04:4d:14:5d:bd:bc:3c:e9:
8e:df:7a:e7:61:fc:58:f4:d2:63:9a:3d:14:06:24:
6d:0f:fe:b8:47:0f:29:b9:14:02:0c:9f:3a:8d:ad:
93:13:1c:69:6d:52:d1:22:51:d9:7d:10:7f:c0:ae:
ac:f0:26:73:f3:5a:b1:85:e1:49:26:ce:c7:35:34:
23:b3:ac:a5:79:19:7b:ca:91:99:25:25:08:7b:7c:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:E3:DB:83:63:16:E2:26:28:DF:A6:60:05:9C:02:46:97:D7:99
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ff:07:b0:52:a6:b2:60:a0:a4:51:5a:c8:92:49:c6:cc:65:
d9:49:45:ee:2f:88:72:d9:10:b9:fc:d9:70:f0:60:22:af:e8:
6f:be:d6:40:56:bc:ce:66:b5:b7:19:ec:e1:cb:99:53:76:d4:
cc:27:1d:cc:02:4a:04:64:04:2a:bb:2a:54:5d:ba:59:11:c2:
81:03:d3:f9:d0:b4:0c:67:6b:1c:a5:c8:35:db:e6:01:7f:cd:
72:fd:85:fe:58:76:b6:09:f6:42:27:96:68:94:fb:96:e5:8f:
38:84:1a:83:e2:97:ef:bc:2b:3e:09:89:f2:c1:c9:86:7a:9b:
bd:01:53:35:cc:b2:02:ab:ec:7f:e9:d1:f2:37:de:da:5c:82:
f7:52:87:0f:57:5e:0e:97:9c:c5:94:34:92:e4:d6:53:0b:3c:
a9:1c:09:3b:78:6a:2e:10:14:e0:81:28:10:41:1f:1c:c7:0c:
25:28:fc:85:7c:16:5c:cb:ef:ed:19:6d:37:e6:f2:9e:33:f0:
78:5a:c0:14:8d:69:e4:9c:17:a7:b8:b3:d4:19:8c:0f:3b:e1:
b0:b1:cc:79:29:d0:53:fc:7f:44:92:54:7a:4f:f2:1a:da:19:
e6:85:62:33:c5:19:c9:0f:d0:70:05:d9:89:f8:5a:9d:8d:d8:
7d:d7:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:25 2025 by rpki-client