Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier: flFzmKLE3d43t5mj8pbwHetjnPCeK/bU/ogDOKSiG+g=
Subject key identifier: B9:46:14:F9:D3:08:7E:61:1F:06:96:88:A5:75:C6:36:6A:E5:A4:FC
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 0198D4A7B1FC608A55B105E1BDBAD0CE904B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: K7l6Lw1WowGY6acuwu13gJvNzpZZtKL5Wec/z0tQKU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b1:fc:60:8a:55:b1:05:e1:bd:ba:d0:ce:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=b94614f9d3087e611f069688a575c6366ae5a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:00:78:27:1f:6e:50:a9:b3:ac:67:bd:17:
05:fc:d7:51:56:01:e3:87:4a:27:e8:8d:db:36:7c:
ba:a5:ef:61:66:8d:e0:bf:c6:16:66:68:65:a2:1d:
32:b1:b5:f0:da:7a:b5:f1:17:17:69:cb:6e:29:61:
dd:00:2a:32:92:3c:2f:ee:47:20:4a:91:05:15:0d:
80:c3:80:c6:90:aa:5a:5a:5a:da:b3:54:3f:05:5b:
50:68:ab:6e:9f:15:42:23:83:f6:9c:73:01:da:1a:
49:7f:d1:65:93:db:1b:28:78:c8:78:d4:d8:2b:a8:
30:eb:26:10:a5:22:99:26:e6:45:15:1d:66:90:f3:
6c:b7:52:4e:22:6b:8a:c7:ba:44:44:03:e9:9d:95:
46:5d:e5:6d:0b:04:c9:0e:01:d8:cb:8c:42:0a:5b:
b1:c9:8f:4b:2b:17:fc:a0:c3:dc:6b:05:f0:2c:e7:
f0:25:cb:94:1f:d9:e3:f1:11:d7:6a:64:ef:a3:6a:
93:89:25:9e:f1:78:af:b4:ab:cb:71:70:65:97:b3:
69:a1:d0:90:c3:71:be:22:25:a9:88:7a:66:63:ce:
0a:c3:be:e6:14:2d:47:b3:f1:e1:a3:0d:97:63:f3:
b8:f7:9b:4d:6d:02:7e:96:57:82:c9:f0:74:1d:43:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:14:F9:D3:08:7E:61:1F:06:96:88:A5:75:C6:36:6A:E5:A4:FC
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a7:5f:5e:56:04:c7:7d:c9:7e:b1:da:fb:9b:9f:4c:29:63:
55:61:1d:cb:aa:b7:d2:5e:12:d1:80:15:27:dc:78:cc:43:77:
ab:77:0e:2c:28:4b:00:c7:1b:de:95:78:a1:71:86:a7:d1:28:
cf:3e:87:8d:d1:d6:13:ff:1d:d0:50:b2:19:86:28:2e:c3:d9:
5b:c1:c0:58:35:05:31:c0:d0:b2:ad:03:08:74:0a:e5:46:b7:
80:29:ff:23:f6:12:3e:ba:f9:63:85:2c:a2:3e:ea:90:65:e6:
25:fc:da:24:4f:0a:6b:c0:d6:bd:fe:7a:ad:57:2a:6a:b5:08:
12:8c:e9:22:2a:3f:3f:4d:60:2e:5e:6d:a5:a6:23:b2:df:8c:
e9:ae:0d:48:58:fa:c8:b3:97:5c:b3:b9:b8:bb:e1:5f:c4:f4:
4f:9c:5c:82:d4:55:0a:16:bf:54:ed:da:09:e2:1a:33:bd:ee:
41:69:8f:0d:52:3e:3f:09:59:64:3d:b7:76:83:2a:89:8d:a1:
b3:13:11:af:e5:ab:35:78:42:3f:05:ce:e8:91:62:d5:b7:e5:
7c:95:26:2b:56:d7:fc:1d:95:80:25:1f:94:44:5f:f1:1b:8d:
44:53:a9:9f:93:fc:1a:aa:15:45:d1:40:62:ec:19:32:6d:8a:
12:fa:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:29 2025 by rpki-client