Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: VIQzYqBnycUWfBtO/eQgqQitKT+l1/Ybr2tu4wvynWY=
Subject key identifier: 9B:39:F2:5D:CF:F7:87:57:7C:DA:DA:3D:02:71:A5:F0:BF:53:72:0A
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 0198D73B5253C97BCADC975C3140181F9D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0D89
Signing time: Sat 23 Aug 2025 14:00:45 +0000
Manifest this update: Sat 23 Aug 2025 14:00:45 +0000
Manifest next update: Sun 24 Aug 2025 14:00:45 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: zYKwmVQz+FRLp7NLginaFcRhFHYTeVpvta26VcHOeek=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:52:53:c9:7b:ca:dc:97:5c:31:40:18:1f:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Aug 23 14:00:45 2025 GMT
Not After : Aug 24 14:00:45 2025 GMT
Subject: CN=9b39f25dcff787577cdada3d0271a5f0bf53720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:7f:0b:0c:8c:20:55:85:fc:4d:76:fc:3b:
71:86:d4:1d:ac:53:74:57:ad:86:0c:4b:b4:91:62:
d8:7b:f9:37:a0:79:4b:83:75:df:b7:d7:40:c0:ba:
32:b5:5b:c0:59:2c:6f:71:d0:e3:c3:72:06:7b:4c:
23:12:68:7c:8f:72:3e:79:d1:c7:9c:45:86:79:b6:
ad:77:7b:46:81:51:2a:0d:94:1b:70:75:74:5d:45:
bb:bd:72:14:c9:51:a4:44:73:54:91:cf:8b:cf:03:
cc:43:56:58:d1:39:59:4b:77:c8:f9:8b:f8:19:84:
53:c3:ad:3b:37:4b:ac:53:08:0a:6b:69:7a:a2:f0:
73:e8:52:b5:38:a2:bf:fd:0b:7e:cf:ee:12:5a:a7:
8f:57:53:d4:41:e6:53:bb:8b:02:e6:68:91:7f:9c:
90:b7:d8:ba:d1:ba:03:0d:43:63:13:38:6f:78:5e:
e3:ef:72:58:8c:1f:c8:57:12:b8:1e:3a:06:9e:c1:
99:8d:85:20:63:4f:62:ed:ce:42:49:c7:b6:b5:e2:
82:0f:c4:dd:1b:3a:19:9b:be:6e:d1:af:ff:75:4f:
50:31:62:6b:9c:fe:70:74:67:0e:8b:4e:c9:37:8b:
ce:30:6d:e6:1a:15:4f:7a:2b:a7:7e:b3:70:6b:41:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:F2:5D:CF:F7:87:57:7C:DA:DA:3D:02:71:A5:F0:BF:53:72:0A
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:a6:40:53:5f:03:f4:54:68:eb:1f:67:22:63:8c:be:a3:
5d:84:05:ce:f8:87:17:1a:92:fd:9b:8b:2b:24:bf:ed:93:ec:
b0:3b:27:06:12:70:cf:51:23:a9:79:97:c9:c7:94:44:b1:16:
dc:3d:92:53:f3:dc:28:ee:9b:6f:e2:dd:fb:1e:3f:b8:c4:04:
93:b4:af:f7:dd:67:1e:82:be:a8:77:31:b4:ef:7f:f3:e4:cd:
64:1a:07:34:26:63:98:ee:f7:12:36:92:9c:24:da:5f:e5:ec:
24:7d:9a:1b:6d:64:22:0e:ae:03:f5:22:b3:68:47:0f:45:09:
67:5f:c2:23:a4:df:82:c5:1e:95:22:f6:1d:da:f4:c0:b5:5b:
53:bd:56:ba:55:da:1b:d8:b3:09:a3:08:ef:b8:37:01:83:7e:
85:b0:01:59:37:7b:7a:c1:0b:4d:e8:a3:b2:d5:de:36:5b:47:
fd:46:19:63:ef:5c:ca:0d:52:46:31:bb:fc:13:c3:ce:bb:10:
fb:37:b0:24:01:dd:3a:ab:2b:c1:99:12:14:4b:8c:b8:1c:2f:
f5:36:a4:e4:b8:5f:da:72:5b:eb:82:0b:52:e0:67:b6:3b:8c:
1b:60:7a:ec:b2:de:52:ab:e4:e3:43:f3:d5:4f:4e:05:09:b3:
d6:e9:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:09 2025 by rpki-client