Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: S4JJ3lH2QebfwKwvUC0EvKIXANetZpGRwZt5Pg3gAtk=
Subject key identifier: C1:8A:0A:59:5C:5F:53:E6:38:38:F1:76:45:EA:B2:BF:BE:89:C3:AC
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0198D65F712415C7072811C9370CA84549C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0904
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: NvqhzAr6UWU7pR0TyU71yd6TPjL/ByddmzxnZqqiI/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:71:24:15:c7:07:28:11:c9:37:0c:a8:45:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=c18a0a595c5f53e63838f17645eab2bfbe89c3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:2c:a1:9b:6e:46:fa:7f:fd:ab:ed:eb:70:
83:f7:44:60:03:78:04:fd:95:36:27:54:9e:bb:e8:
c9:59:94:9a:b2:4d:42:82:3e:8a:13:fc:b2:ca:57:
76:31:ad:1c:c0:e7:86:97:d4:cf:b0:c8:d0:81:db:
8a:37:b4:f7:53:6a:7f:84:42:fb:b7:1b:4b:ba:b8:
14:cc:9d:db:78:7a:28:73:a7:63:64:01:0c:14:27:
14:50:72:1d:fa:01:37:a4:87:b0:e5:cf:c9:e6:b1:
79:21:2d:41:ac:c2:6e:29:d4:3d:bb:f5:8d:d2:95:
d4:32:ac:f3:61:28:dc:bb:70:7b:59:e7:ab:af:e0:
c6:cf:f7:7b:57:f5:4a:87:20:d0:b6:07:c3:74:94:
4f:81:8e:fb:38:77:e1:93:9a:18:03:a7:39:a3:34:
3f:79:6f:28:8b:47:1a:51:93:30:f2:2b:3d:aa:dd:
0b:bf:a5:9d:79:fd:99:6b:db:b0:05:3f:46:a6:bc:
97:d8:52:08:30:18:a7:f2:35:ed:7d:38:3d:f5:1b:
0d:78:7d:45:79:2b:a0:bc:ea:20:ce:34:f6:22:7d:
5a:a1:23:6c:50:f5:03:36:75:84:62:30:62:a7:61:
34:d3:2d:f7:b6:51:bb:2f:30:bc:37:a5:14:5c:1a:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:0A:59:5C:5F:53:E6:38:38:F1:76:45:EA:B2:BF:BE:89:C3:AC
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:3d:73:32:14:70:2c:02:47:65:5e:95:24:4d:f2:7b:df:
b6:a7:57:e0:ed:5a:68:41:0a:16:dc:c4:00:c8:c2:42:a9:fa:
2b:54:75:39:00:1c:e9:b4:b1:d7:ca:01:9a:e4:cd:33:82:59:
02:7f:2d:86:e8:cf:8d:07:ea:d2:1a:5a:d9:71:70:e9:72:20:
b6:b9:00:a8:32:8b:4c:f2:73:19:ab:5b:52:0a:d3:0e:60:41:
d1:49:02:8e:99:26:12:e1:f1:2f:d3:d0:74:79:fc:c0:8e:e9:
38:9a:01:cf:a1:b4:94:ef:6b:cc:ff:57:f0:f7:b7:45:bd:f8:
f9:3a:05:dd:67:34:89:b0:d7:c0:75:53:cf:f1:4c:13:0c:3c:
70:1c:97:59:8b:d3:95:2c:ba:0b:c6:16:46:a6:b5:8f:e9:80:
33:e1:dc:18:28:5e:18:22:a1:8b:ed:2f:b3:48:41:c9:59:83:
de:f1:6a:94:c6:2d:3a:f9:fd:70:1c:da:09:d9:8e:e4:cb:42:
aa:39:a4:9f:c3:12:7e:ac:35:f4:5e:13:12:99:58:51:6b:af:
a0:6f:8e:91:5d:a3:44:a6:ab:9a:8b:a6:0d:09:53:91:43:92:
55:4e:9e:53:61:f5:3a:4b:e4:d9:55:8c:60:09:5b:4a:4a:8e:
05:d2:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:46 2025 by rpki-client