Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier: rcQswDJfVol/lEJkTOSjvecBK1khj1kssq1Ao4ACdWc=
Subject key identifier: 63:91:00:72:BB:0F:17:E2:A0:8B:9C:7D:52:FB:10:19:91:4C:75:A0
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0198D583DFE972F7B579BAA37E5A2851499E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (hash: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=)
2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: cuUuJGR/riuvoY+8B0nA5XEW2D2EnjHk6L865ZLLFyM=)
3: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (hash: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=)
4: mpgyXJ7iE41eH88IcrenXFUA9NI.roa (hash: wZqBDQ4cwcpcocBr4dj1IjCT+ao6cHj31fYRn+uOxj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:e9:72:f7:b5:79:ba:a3:7e:5a:28:51:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=63910072bb0f17e2a08b9c7d52fb1019914c75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:63:3c:cf:31:63:5f:fd:c1:a3:12:1b:92:
c8:60:1d:6b:af:07:b5:af:0a:09:f2:3a:e6:75:7f:
c2:8c:b0:7b:8c:a5:43:a5:9d:95:f8:98:c3:e2:08:
fd:d8:77:f7:21:7e:da:cf:4f:1a:db:40:03:fb:b0:
8e:e1:75:c5:45:04:8a:44:ed:a7:c3:c5:3b:14:31:
7c:bf:8e:e4:00:41:8c:2e:c4:4d:93:9d:97:91:36:
93:72:b8:c2:00:e8:66:97:59:0e:ad:e2:f1:e5:0b:
34:b3:1c:23:8d:f0:b5:d6:17:ed:a2:d8:06:da:f7:
f6:ba:14:86:97:0e:6f:75:13:d1:13:ac:53:a4:78:
4f:af:33:1d:83:e4:c7:1a:bb:0d:34:e0:3e:6f:e1:
db:0b:ae:90:7a:e5:33:af:ff:5a:3f:93:df:ad:4c:
15:f6:fa:c0:ce:d4:04:6e:e8:fe:cb:07:66:e7:29:
77:a5:d7:54:b9:a9:dd:04:bf:36:15:17:7d:1b:f5:
5f:89:e5:43:b9:6a:40:25:ec:eb:21:21:6f:20:f9:
49:7e:a3:1a:26:d4:ee:cd:3c:84:c0:ac:73:7d:9b:
7f:27:c8:f6:bc:87:f8:c1:a9:90:83:28:50:a3:8a:
db:50:bc:99:ba:ff:f3:d5:56:4a:fa:54:dc:b2:45:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:00:72:BB:0F:17:E2:A0:8B:9C:7D:52:FB:10:19:91:4C:75:A0
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:84:7a:0c:a9:68:60:86:9b:9b:06:ce:e1:b9:59:81:20:3e:
15:33:4f:59:e7:ea:97:52:1d:36:fc:8e:f7:8e:1d:d1:0a:c7:
82:18:ee:7a:91:a2:a4:39:d9:34:a9:24:1d:48:76:e8:ec:22:
5f:a1:af:a0:6f:44:2f:39:30:1a:92:e7:c8:19:d2:29:2d:5c:
59:95:d4:08:7f:fe:20:0f:20:2a:a1:9f:ed:25:f1:4e:f4:a3:
80:91:19:20:cb:5c:40:52:e2:1a:3a:cd:5e:e1:81:09:3b:df:
14:5a:24:59:66:aa:0f:c5:72:7d:a0:e5:28:24:18:f6:f7:9c:
90:1a:aa:d8:d0:cd:d0:4d:a7:84:03:70:08:e9:84:08:7e:a6:
ba:45:63:11:ad:d7:f8:4a:f4:06:ec:3f:33:08:0c:10:25:95:
fb:2b:76:3a:e4:99:e7:44:55:94:34:12:1a:75:bd:ba:1b:17:
04:2b:be:c7:dd:8c:57:79:84:53:59:2c:60:b7:14:81:cd:18:
57:f0:be:37:63:09:ba:58:2f:d5:e4:27:1b:e0:c0:55:4b:38:
18:de:8c:d4:6b:0f:b8:e8:b8:d8:2e:43:3c:5c:27:3f:3c:2a:
e2:c3:a3:89:2b:09:95:eb:7d:35:45:4c:f4:33:0c:a8:73:c6:
31:33:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:22 2025 by rpki-client