Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: fCJqDL+3HnuwyACeTkLWG+TUj9mXhmM+2N5trNP09SA=
Subject key identifier: F7:17:E2:C2:93:53:11:32:4E:64:BA:92:45:EF:17:6E:F2:C6:D3:86
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0198D5F19C744603998883D98C627144A1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0CC7
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: ZX9nxDUdUbVGMPMxBCqF7OdwMQad1LjEG/ITXdUJklo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9c:74:46:03:99:88:83:d9:8c:62:71:44:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=f717e2c2935311324e64ba9245ef176ef2c6d386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:1b:9f:62:7d:88:a4:56:c6:de:61:2a:a3:
9c:c5:66:55:45:c0:34:4f:45:90:fa:9d:90:d4:c7:
cb:22:8b:d6:38:b9:95:1d:c5:3b:bb:b7:dd:2d:55:
85:5b:3f:eb:9a:7b:c9:e7:5c:c8:66:7e:c9:d1:2c:
7a:47:8b:81:9d:e1:ed:48:fb:78:6c:2a:8f:51:af:
25:3f:5f:75:2e:4f:e3:37:53:2d:26:98:8c:fb:c1:
d3:8f:5e:0b:27:bb:4f:bc:02:e2:58:01:87:b9:10:
6b:ae:5b:4c:31:b1:52:90:ed:7b:9b:64:d3:c3:c8:
c9:6a:e7:a7:a0:fa:ef:be:af:5e:40:8e:97:29:5a:
50:ba:4f:c9:88:75:a2:08:2a:cd:d2:0f:3f:62:cd:
08:d9:2e:fc:7f:7e:2e:25:f8:9e:c7:e2:b0:ce:07:
6d:fa:6e:19:84:ed:04:ec:b2:9a:c3:a4:21:8e:99:
3e:de:9a:23:c2:1b:f4:d3:2f:8a:cf:54:19:0f:fa:
5f:94:b2:18:bb:f6:46:90:86:9e:46:79:2c:0c:6c:
97:08:47:bc:09:ff:f4:1b:0d:ab:a7:1a:aa:31:1a:
dc:5a:14:2d:8a:32:8d:e8:b1:85:4d:f4:28:17:a8:
c9:79:c7:b5:95:02:1c:a4:97:8f:1f:11:57:39:5a:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:E2:C2:93:53:11:32:4E:64:BA:92:45:EF:17:6E:F2:C6:D3:86
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:9e:db:18:df:2d:05:5c:12:68:54:48:c1:8d:14:d3:35:
39:98:4e:96:8e:99:d7:30:78:f2:34:9c:fe:f1:56:aa:c3:d7:
bc:fb:b9:b1:0b:aa:47:a1:22:7c:d1:38:51:a0:1b:f8:4a:28:
14:39:d6:4f:b6:ee:e6:92:5a:96:12:20:9b:53:ac:0f:7a:f2:
76:8f:6e:dd:21:91:d4:ba:cc:d1:78:ec:0b:49:77:e3:5e:da:
fb:aa:03:06:ef:8f:3d:81:d2:ee:67:89:8a:08:4b:6a:04:ec:
d0:0d:43:58:fa:19:d7:0c:10:d4:58:21:51:5e:ea:cf:aa:56:
e6:9f:3a:2a:96:fc:20:ef:56:d4:13:6d:90:8e:a9:24:7a:fc:
27:f3:d9:8d:36:6f:28:81:aa:d8:27:f2:d2:6d:ee:ed:0a:0a:
84:68:e9:c5:64:40:7a:23:a7:ba:d7:af:e7:1e:6a:4b:fc:b0:
c0:30:fb:94:ea:06:a4:2c:3e:b3:2e:16:eb:79:a4:5b:53:25:
47:66:06:19:3a:9a:49:53:a3:60:29:51:9d:2c:88:70:18:e5:
bd:9c:eb:98:6a:f6:55:c9:d8:90:72:b5:95:bf:8a:4e:fd:6e:
44:7e:1c:09:c2:ca:45:62:df:45:72:57:44:71:ba:ad:9b:5e:
27:2b:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:25 2025 by rpki-client