Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: EM2L3SOcGc0YXVbNrWl1yuYy8WDZ3lihPcRjj1dEEUg=
Subject key identifier: 03:43:CF:4C:4A:5A:5C:8D:C7:FB:97:EB:18:01:32:BB:9C:EC:A2:A4
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0198D7061F98B93A2FA729B5C8F8B9EFF4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: qEpEtmMSUrWbSvXh2R5pNfMbBYXDZmtpYv7MzymLalg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1f:98:b9:3a:2f:a7:29:b5:c8:f8:b9:ef:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=0343cf4c4a5a5c8dc7fb97eb180132bb9ceca2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:de:16:2e:43:7a:6c:1f:a3:4a:b3:44:ac:
19:4f:4f:20:ea:e0:23:8e:e3:24:e5:d6:2a:f5:d6:
da:b0:ab:b4:91:32:58:a2:42:39:55:77:47:dc:68:
89:3b:a6:0c:2a:52:72:d4:f6:6c:32:98:ff:6c:65:
45:ea:ec:26:df:22:94:23:a0:83:ba:1f:74:de:d4:
07:51:07:98:3e:51:6a:8d:ac:ce:46:57:84:8f:98:
cd:66:eb:ae:33:c2:5b:34:f6:fd:75:25:79:04:d2:
7f:2e:e7:66:0d:97:ac:44:32:81:7d:3f:52:55:fb:
3d:0b:fc:c7:39:17:7a:ea:08:66:f1:d7:da:ce:66:
d9:20:7e:6f:66:aa:45:c0:75:6c:d3:a4:ea:2b:3e:
e7:40:2b:0b:93:9a:75:10:17:6a:95:65:49:72:ca:
da:9b:be:59:23:ad:1e:58:c5:29:6f:ab:b1:7d:93:
0e:71:db:5b:ca:a0:61:8c:c9:0e:f5:cd:e7:52:5f:
be:d2:75:be:2c:7f:9e:5d:71:8e:f9:92:ee:f1:85:
d2:fa:b2:ac:98:4d:62:37:47:19:0b:9c:40:41:d8:
96:4a:25:59:73:1c:74:99:56:f1:db:aa:53:4d:ba:
b9:52:33:9c:eb:02:ba:13:ac:90:89:a5:2e:67:05:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:CF:4C:4A:5A:5C:8D:C7:FB:97:EB:18:01:32:BB:9C:EC:A2:A4
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6f:b0:f0:50:d3:c3:74:d7:0b:d1:5c:b2:15:57:13:0e:97:
ef:a7:4d:40:91:df:d0:40:e8:91:26:79:d0:ab:b0:82:b0:00:
c3:41:a2:a1:2f:62:47:db:2d:40:79:a2:3d:36:7c:bf:90:b8:
da:48:18:fb:0f:0a:16:79:16:8b:a6:55:f5:bd:41:07:4b:49:
c9:2f:e2:c8:36:d4:a1:d0:9c:f4:0e:6d:07:a9:07:8e:e5:3a:
04:43:43:3a:7b:3e:d5:b4:e7:f1:1d:97:e6:38:05:f1:c4:5a:
93:5d:11:b8:91:15:40:58:e2:1f:7e:5a:14:ff:08:3c:29:71:
a3:e4:e4:0a:1a:f8:98:bf:a0:99:50:19:f8:e9:c4:35:b4:d6:
6e:2c:a8:68:e4:f4:76:34:ce:8b:5c:16:b5:5c:47:5f:23:0b:
39:d8:c7:4a:5a:72:0c:b6:f4:5b:20:5a:c5:e5:42:fe:f6:cb:
93:92:57:53:a7:1e:6f:41:da:95:c7:a7:61:40:e3:02:98:0a:
c2:e4:c6:18:a1:1b:37:03:3c:a6:a2:11:e1:ab:f7:2f:9b:d5:
dd:b4:1f:ad:19:22:c1:20:64:15:fe:5f:68:c3:14:dc:1d:9c:
34:50:a6:22:73:a1:32:60:62:ae:d6:05:50:fb:c3:43:7c:37:
3a:b4:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:15 2025 by rpki-client