Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File: UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier: suUMkC9Bea6SBSbuVhEeZC3ALI+ZSz8tk0SZNAEf4J8=
Subject key identifier: 11:93:F6:A0:FE:2C:DB:D9:C4:C6:FC:9A:B2:21:69:BA:F1:49:A8:ED
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial: 0198D4E0D51E4A2C99689AAB9CC33D5717D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number: 0D20
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (hash: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=)
2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: MXi4xrRdWX1TEIos+Aqxsl8EOCjYp9/sa/H3qYvxQFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d5:1e:4a:2c:99:68:9a:ab:9c:c3:3d:57:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=1193f6a0fe2cdbd9c4c6fc9ab22169baf149a8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:e1:93:1d:bb:f1:21:36:76:ed:41:c8:af:
71:71:df:95:e3:8b:f2:97:dc:cf:4d:0f:3f:c4:17:
95:af:84:3b:5b:d7:f4:11:4a:cc:03:60:90:3f:c0:
f0:ef:ea:91:2a:72:0e:98:ae:8f:2d:30:3d:27:0c:
a0:20:65:58:2f:62:f0:83:64:08:d2:dd:ae:5f:2d:
dc:8c:2f:e8:c2:d7:08:eb:f9:64:4d:86:d6:3e:d3:
12:e2:22:1f:39:4a:da:46:66:e2:8a:c9:aa:0f:54:
08:0c:d6:a0:32:20:ca:51:7e:da:c0:bc:5d:8f:2c:
16:79:1a:9a:f9:e7:93:48:22:32:d8:e8:57:e6:dc:
c9:ba:d7:28:ab:e3:58:f7:b4:f4:43:f8:35:d6:00:
be:e7:34:f2:dd:58:f9:8d:1d:af:37:a1:11:0a:a2:
7c:15:e5:4d:c2:7b:a7:8f:08:b2:5a:7c:a5:14:d1:
3f:03:9f:f1:91:f6:8c:24:80:49:2e:ad:30:a8:7a:
77:5c:77:f8:5e:db:9d:72:84:a2:54:b3:ae:62:68:
32:4d:0d:56:51:d8:b8:29:f2:37:01:39:97:08:66:
2f:8c:d5:a0:65:06:d1:8c:fd:8d:1a:ce:34:5d:96:
1c:b8:25:c0:ce:1e:87:f3:60:3e:ec:f0:40:58:53:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:F6:A0:FE:2C:DB:D9:C4:C6:FC:9A:B2:21:69:BA:F1:49:A8:ED
X509v3 Authority Key Identifier:
keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:cd:69:a4:0a:6f:a5:fe:8e:b7:16:f0:d6:d0:43:2e:ac:
3f:df:77:b2:87:8a:94:5c:b4:48:e6:bc:5f:4e:56:c4:8f:4a:
c9:6a:a1:eb:97:a5:7b:2a:89:12:5f:66:28:ef:af:a1:77:ef:
28:f5:80:24:3d:24:92:17:8f:e6:1d:58:ed:a0:0c:18:77:95:
25:92:03:80:51:b1:be:ca:ed:5c:05:94:07:88:2c:38:d9:e9:
98:5a:96:35:08:dd:4c:e7:94:96:74:d9:63:e0:a7:9a:d2:48:
11:9e:46:a2:a5:cd:ac:85:d8:8a:dc:86:19:e3:b4:3a:3c:a2:
77:f5:8e:d6:39:c8:fe:2d:f7:6e:73:53:94:c4:d8:97:08:c7:
1d:98:21:d0:a1:b5:73:ca:f6:ff:9d:1f:30:74:77:d7:6e:ea:
17:e9:9b:9d:c2:d4:e7:24:ee:3b:5a:a5:0a:e2:0f:77:eb:30:
4e:b3:92:0e:19:21:0b:e5:5b:7c:d5:d1:3f:2b:da:6c:5e:9a:
4c:01:49:82:28:bd:fa:b2:39:1f:c0:a7:a1:4c:d5:40:f5:90:
b6:06:9b:55:db:95:f0:ca:7d:91:60:be:2b:cf:31:f2:14:d1:
1c:84:1f:ef:2c:26:e2:d8:5f:95:70:48:6a:86:0d:52:b6:a0:
c1:da:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:00 2025 by rpki-client