Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: VirdjirBVwUhvVXf4mwJwXr0+mu815V4A0WMdoNLSQ0=
Subject key identifier: AA:AA:44:58:4A:53:08:4C:80:31:CD:AD:51:65:A7:27:3D:44:D9:8A
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0198D54E048AFED458543A0E69F536276B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: C0613aEHOvj/je632BS+zUfuNvQmG3yBkjuk6SDsGNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:04:8a:fe:d4:58:54:3a:0e:69:f5:36:27:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=aaaa44584a53084c8031cdad5165a7273d44d98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:c2:dd:ff:49:36:74:61:24:e4:5d:fd:dc:
4b:27:72:2b:fe:e6:60:d7:a2:ec:3f:bd:f6:a5:95:
6c:ad:f4:35:93:34:17:42:67:94:58:d4:cd:bb:33:
d0:66:ef:ad:01:17:27:b5:85:e6:c4:3f:f7:4c:da:
4e:6d:d1:ac:21:b4:d1:c7:45:fd:47:21:e5:58:37:
f4:0c:82:7a:dd:5b:f2:75:ce:87:0d:c4:66:17:d2:
aa:cf:58:ba:6d:8d:fc:c9:61:c6:f4:db:21:3a:cb:
e0:dc:62:c5:4a:14:f2:9a:ea:39:d1:04:69:f7:d7:
f5:dd:b6:eb:fd:2a:2b:64:76:5b:e1:9f:35:e6:b9:
1d:45:6a:ba:48:06:64:ea:ea:11:e3:ba:3f:96:62:
7e:26:5c:07:e4:3a:90:c8:c2:6c:54:4c:26:28:38:
0c:d8:0c:5e:4e:18:c9:8f:dd:e1:8c:10:15:c0:f3:
f9:f6:a7:25:3f:6a:be:44:61:0e:70:f4:e5:87:5b:
7f:83:bb:52:c7:7b:cd:e5:86:46:ee:c3:15:17:b4:
d6:ce:d4:7b:1d:cd:fb:cf:09:1c:74:f7:0f:06:ad:
fe:f7:fd:59:32:0c:6c:42:a2:fa:a6:41:7a:f2:2b:
14:1d:56:5a:2a:9a:fe:e0:ba:1c:d3:75:58:96:d4:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:44:58:4A:53:08:4C:80:31:CD:AD:51:65:A7:27:3D:44:D9:8A
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:fc:6e:e1:a9:d2:45:7f:2b:bb:16:82:80:44:e1:3b:44:
d3:70:2e:34:97:40:7c:31:ea:cf:a4:c1:c7:e0:c1:95:3c:e5:
e8:d3:01:f5:6b:40:6b:00:8d:f1:c4:b0:a8:e3:31:91:84:1f:
62:95:1b:38:ab:9a:05:88:48:52:20:d9:ce:b9:c1:a3:35:27:
86:03:d0:c5:f6:13:0b:59:1a:02:2a:9e:3a:0f:a6:a6:9b:3d:
0e:13:35:69:e0:6e:4f:be:02:9b:9e:81:c1:23:8a:b3:a4:3c:
3c:0c:c7:db:54:25:10:12:55:cb:cf:40:f1:79:cc:5c:01:77:
2f:f0:df:ad:71:d8:ad:76:30:2d:42:1f:23:58:ca:e1:02:76:
63:dd:64:c4:2e:29:c0:be:69:fa:88:cd:ba:60:c3:53:f4:86:
a4:5e:22:33:c4:79:67:35:8d:70:06:f7:ac:57:a9:2a:66:af:
a4:07:1e:11:a1:1b:76:c2:a8:ab:ac:66:6f:32:8f:89:70:4e:
99:2f:57:aa:80:28:7b:2e:db:0b:e7:5e:96:34:76:5e:b8:3a:
b8:c4:96:58:be:de:c2:09:cf:85:ae:f5:1d:7a:7b:d1:ec:36:
18:d1:e6:09:0b:9a:51:bf:72:43:f6:ac:59:ec:8b:83:0b:bb:
5e:d3:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:25 2025 by rpki-client