Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier: kTDbcehgPUpCVdQP7qUTl1sO6pjIGlBGrAvhEockkWg=
Subject key identifier: E6:6E:E8:52:F6:33:F2:35:32:D1:16:16:33:0C:BB:91:89:3D:08:CA
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial: 0198D65F8E1A14D53885FFF9D1C674C8CF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number: 13AB
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: MggUNL8VW9yE4LnaTyr5YJxrDwU.roa (hash: GpA5vo0L4EKCpZl/rQZR5bRixQFok1LnqW2Xg8KUiaQ=)
2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: E1bYZfEqRYeXpJaENq/eniPOt5tkA0Qw4E7og68EZOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8e:1a:14:d5:38:85:ff:f9:d1:c6:74:c8:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=e66ee852f633f23532d11616330cbb91893d08ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:11:43:43:f9:e8:86:15:ab:15:84:47:0f:
70:2f:c1:7f:63:7e:7b:1e:26:f4:8b:ba:e8:00:5d:
7b:8c:dd:e3:d9:47:bb:84:3a:12:15:d1:26:4b:4f:
0b:fd:96:22:28:91:ba:83:62:39:13:70:ff:f0:2f:
52:8e:28:ab:a1:35:01:e5:f0:b7:1d:24:d1:1c:cf:
51:db:f8:18:fb:7e:5d:6e:f0:14:8b:0b:49:53:72:
07:40:b6:81:16:64:6a:2e:d8:9a:e3:40:5b:9b:79:
2c:4d:10:71:c6:ca:cd:55:38:41:8e:93:ce:bd:8f:
bf:3d:18:d7:26:b6:0d:e6:bf:e9:4c:53:85:61:e0:
2b:82:f0:b0:19:46:68:ad:0c:90:89:b5:d8:78:8b:
bd:51:a4:87:19:45:4a:62:49:be:73:ab:48:dc:71:
67:81:b3:7f:ff:1b:81:f6:b4:d8:01:74:48:b4:51:
95:74:99:44:72:3e:45:f3:c8:80:87:44:e5:77:5f:
3b:f2:b8:fb:37:b0:97:2f:d9:81:a5:09:67:b4:52:
f4:ca:65:50:de:cf:d1:7b:27:a1:ea:f9:7c:0b:8e:
d5:37:b0:d7:0e:23:0d:77:e0:58:61:41:0e:f5:85:
ee:fc:f9:2b:7b:cf:c3:ef:82:42:9f:31:fe:98:f0:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:E8:52:F6:33:F2:35:32:D1:16:16:33:0C:BB:91:89:3D:08:CA
X509v3 Authority Key Identifier:
keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e6:4e:d7:eb:37:38:c9:f4:0b:33:d7:6c:6e:49:5d:a5:f5:
4d:cc:93:69:74:98:ee:fa:98:3b:eb:5e:d0:78:38:a1:53:a6:
73:e3:cc:e3:d9:26:41:01:a1:0c:9d:c2:db:5f:f3:16:0e:59:
59:1f:22:83:40:14:a0:74:03:27:c0:5d:14:59:5f:32:27:be:
7a:48:4a:64:29:48:ae:95:48:84:c6:bf:ef:f5:93:f1:8a:21:
b3:2c:29:2d:10:b3:b6:44:fb:fa:bf:16:13:2e:73:f8:bd:27:
7a:cc:27:8e:0c:1b:43:4b:10:ff:33:d1:6b:e9:39:c5:b0:31:
b2:b3:12:23:44:47:76:9b:05:d7:99:b1:3a:7a:56:eb:c3:76:
e8:06:9a:e7:d1:e3:b1:e1:bd:17:ca:4f:8f:75:c9:69:d9:b4:
ab:92:ee:3f:0d:a4:e4:32:40:bd:4a:9a:eb:c0:9b:ac:b0:08:
aa:b5:63:b9:2e:fe:e5:60:8c:ea:0a:bd:4c:5d:79:af:b9:03:
7a:2f:d5:39:30:a9:e5:3a:0a:fd:04:a6:89:09:15:d2:a7:1b:
13:bf:61:99:a7:1f:69:7c:37:f6:00:3f:9e:99:01:9c:b7:0f:
75:22:76:d2:44:92:50:d8:3e:6e:fb:b5:13:be:44:53:6f:0a:
de:24:75:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:26 2025 by rpki-client