Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier: bL/miGsvl8eZR17dtKeFSTgBV8PtvShNVMjW+5w4t9c=
Subject key identifier: 24:65:F6:C2:E4:47:5D:9C:FD:B2:32:37:A0:CA:71:E5:65:A0:86:71
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 0198D73AD603F01AF5BC47D134F8E7C30C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number: 055D
Signing time: Sat 23 Aug 2025 14:00:13 +0000
Manifest this update: Sat 23 Aug 2025 14:00:13 +0000
Manifest next update: Sun 24 Aug 2025 14:00:13 +0000
Files and hashes: 1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: UjihPKM7LvqAsBi3atRC2zPpwYg6PzYQ3vhuSKocwAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:d6:03:f0:1a:f5:bc:47:d1:34:f8:e7:c3:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Aug 23 14:00:13 2025 GMT
Not After : Aug 24 14:00:13 2025 GMT
Subject: CN=2465f6c2e4475d9cfdb23237a0ca71e565a08671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:9f:cd:74:1f:86:fa:2b:b0:33:b7:2c:b5:
cc:c0:f6:54:4b:62:e4:8c:e0:24:8a:b0:4a:a0:4c:
61:46:53:da:89:1f:0c:a2:18:1c:f2:e7:ae:8f:11:
b2:f2:c2:65:aa:8e:3a:87:8d:f7:87:fa:49:c3:3b:
32:ea:95:b7:38:6f:b7:c5:df:f8:48:aa:e4:dd:27:
8a:51:bd:e9:33:e6:11:69:fc:05:05:0a:d5:36:73:
a3:b2:23:0c:71:31:30:00:65:c7:67:64:cb:fb:4d:
f4:8d:a7:f1:b8:de:4e:a7:28:3a:02:72:33:e1:db:
bd:8b:b5:ad:8a:c2:4e:f3:52:bf:57:3a:0a:cd:05:
27:be:16:aa:fe:68:a2:8e:c2:e2:31:32:12:a6:b4:
f8:06:f1:19:2d:1c:a8:28:7d:d3:2b:5d:4e:52:7a:
13:2b:d0:9f:a6:73:92:07:0a:c4:ec:71:4f:a3:4f:
62:1d:50:74:a4:cf:b3:b9:4b:75:6e:4b:64:7d:99:
8b:36:28:42:4b:07:a4:3c:a8:44:ad:2a:c4:60:65:
3d:09:39:03:68:45:50:86:6e:ce:5e:97:88:a6:3f:
d0:15:ed:4e:36:56:2e:43:02:2f:f0:e9:11:a4:5b:
70:08:34:5a:d5:a5:a4:0b:91:f1:29:11:40:d8:e1:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:F6:C2:E4:47:5D:9C:FD:B2:32:37:A0:CA:71:E5:65:A0:86:71
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8d:f8:bf:48:7d:ca:4f:ba:ae:d3:2d:e3:6f:51:27:09:8c:
88:19:9d:7d:4e:5e:6c:81:28:5c:18:89:27:1d:5f:24:44:c7:
54:72:29:ff:46:1e:7a:0c:a6:50:f4:e0:7d:2c:64:6d:de:2d:
f7:0c:ff:bb:38:53:96:10:43:dc:69:23:81:f4:71:b3:95:7b:
98:17:d1:ad:94:fc:f3:5e:41:3f:6f:1f:2e:e3:26:fc:64:ed:
d9:2a:e8:e1:47:12:7f:06:0d:3d:36:54:fd:46:16:e6:c7:15:
7a:73:e0:92:0b:80:98:cf:00:bc:7c:28:de:ed:b6:9e:6b:55:
fe:db:89:f7:d3:0d:66:8c:ef:b2:a2:61:08:dc:7d:c3:ad:23:
e1:d4:23:77:35:c0:41:6e:a9:bd:59:9d:2c:e9:32:b6:48:48:
91:74:21:52:88:9f:df:4d:66:c3:42:84:85:04:a8:4c:53:42:
d2:e7:b6:21:0d:bd:71:e1:0f:e6:85:0f:3e:7e:72:4e:2e:cf:
92:c6:81:57:16:33:10:b2:9b:06:d5:d5:80:7d:56:c8:3e:a8:
d8:b6:94:fd:16:24:f5:66:0a:8a:0e:fa:a2:80:4c:63:95:e6:
3f:35:50:39:78:88:23:e6:b2:ee:d3:c9:67:be:cb:d1:d3:3c:
34:c1:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:28 2025 by rpki-client