Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: U+YG6f78NAHAWTnr1TQWLiermUk9E1Nt6YfenPpz4lQ=
Subject key identifier: E2:2A:5B:65:BB:FD:77:72:79:E4:02:44:9A:A7:92:3D:E2:0F:AE:11
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0198D773234712FF0C67D9378055CB15D343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:01:43 +0000
Manifest this update: Sat 23 Aug 2025 15:01:43 +0000
Manifest next update: Sun 24 Aug 2025 15:01:43 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: jtJtPbXSM2Nhb3ILiPfriiVT8U1K9Q3TdAgrYGTLjuI=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:23:47:12:ff:0c:67:d9:37:80:55:cb:15:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Aug 23 15:01:43 2025 GMT
Not After : Aug 24 15:01:43 2025 GMT
Subject: CN=e22a5b65bbfd777279e402449aa7923de20fae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:0f:63:ca:9b:9e:ae:06:b1:9d:06:93:d3:
59:27:15:f5:f6:bf:1d:38:b6:28:5d:a9:c7:83:b9:
8b:a9:67:5a:3f:67:00:32:ba:11:1d:03:42:04:f2:
98:b0:a1:0e:d7:fb:92:d4:3c:07:75:27:84:9f:71:
94:8e:b2:c6:f0:79:be:dc:00:0c:5d:ae:86:59:9d:
d7:43:97:5b:ab:ee:dc:2c:e2:18:22:e4:ab:3d:00:
81:44:af:65:2c:b7:89:f1:cd:97:0b:00:db:c2:68:
93:fe:4a:f3:69:b1:8d:e0:48:53:a2:a1:2a:58:83:
84:82:fc:ac:a3:52:85:53:fb:64:98:b8:09:1e:cf:
13:0a:6c:14:d3:28:bc:c3:61:4d:c3:35:3f:c6:e6:
3e:dc:f2:d5:55:16:62:fe:75:da:9a:eb:6e:ed:26:
f6:bf:f6:52:ba:db:43:a8:9e:d5:e6:d8:69:93:ff:
8e:4f:7b:88:f8:71:08:7b:81:ec:95:8f:14:04:5b:
3e:52:8a:69:ba:08:58:c9:6b:bc:f5:b8:5b:35:c1:
9d:5d:9f:ba:42:e0:01:45:6a:13:fd:a0:7c:ec:dc:
2a:6e:6a:93:a4:de:6d:5a:0a:33:d0:3f:d9:ae:99:
8b:11:a2:32:f0:38:ea:63:ee:59:ed:f6:cf:bc:0f:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:5B:65:BB:FD:77:72:79:E4:02:44:9A:A7:92:3D:E2:0F:AE:11
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:e1:04:f8:d1:8d:d8:78:ad:2c:33:c1:9b:82:1d:51:59:
00:88:4f:4b:5c:85:07:3a:1a:20:9f:79:b8:c1:1e:be:2e:46:
7b:17:54:18:82:d8:11:64:05:a7:27:b2:47:4e:5c:43:78:8c:
0a:19:8e:7d:4f:d9:8c:31:75:24:7b:30:eb:2a:2e:7b:f2:e3:
76:9f:61:d8:70:ec:b7:f7:91:18:9d:64:ed:6d:30:99:c4:3b:
51:76:2f:ec:ae:4d:f4:84:13:af:67:05:b2:77:a8:7d:f6:46:
e9:c0:f3:57:0d:95:1d:5b:90:a9:db:ee:0d:5b:9f:16:a4:a9:
68:bf:b5:00:ad:92:7e:f7:fe:2e:fb:d5:3d:a7:07:ef:2e:4d:
1d:fb:38:db:6a:c3:bd:21:e9:3b:f5:57:e1:fb:27:51:01:78:
96:ad:c3:5b:b3:58:db:11:3d:22:ea:50:0d:47:82:49:56:38:
d4:44:20:ae:c4:05:e7:c3:45:40:25:29:da:3e:ea:86:bb:1e:
3b:35:6f:1b:00:77:ce:3d:e1:a3:77:a9:bf:bc:f4:a3:99:89:
33:c0:b7:18:65:5e:8a:5c:a1:5f:9e:01:54:1a:5e:82:2d:e7:
d5:7a:48:51:18:d4:a5:f2:5b:ce:ea:cb:66:c8:cc:ca:0b:a2:
5b:67:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:54:09 2025 by rpki-client