Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: n9PIYxM3xm+IuyJn3lXmcAb5dHn4Cf1+YyGbFd+nsz4=
Subject key identifier: 72:E4:EA:CF:41:CE:B3:65:3E:FE:EB:35:94:1C:DF:DF:DA:8A:33:E0
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 0198D5F1BDD69E5678956F1BAE3B6AF3D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: C2Zax0UVvnegN17BWXozEdc0SJynprEg4va3S3L10WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bd:d6:9e:56:78:95:6f:1b:ae:3b:6a:f3:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=72e4eacf41ceb3653efeeb35941cdfdfda8a33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:83:db:bd:a8:42:f9:82:f2:b1:85:3d:9b:
88:d4:e3:6b:5c:a2:60:d5:3c:55:43:c2:06:0f:5a:
ac:6d:f7:2e:d1:64:b2:2c:26:74:06:39:38:dc:a9:
d7:ce:85:8e:b6:59:7b:87:3a:16:2a:01:c7:93:99:
63:4f:68:94:c0:e3:b7:ee:05:25:2c:99:c2:9b:88:
63:8d:53:9e:81:8a:07:4f:7a:9d:0f:1a:a6:5b:e4:
4c:2b:05:07:e0:14:f3:dd:ca:b1:52:49:12:ca:5e:
be:09:55:ba:85:a4:28:6b:40:04:bc:d3:0d:92:fd:
a7:41:3d:d0:26:7b:c7:41:12:df:f4:22:55:48:d6:
55:c5:05:e9:af:45:39:af:51:24:db:a0:b5:8e:8a:
f3:8d:ef:39:e2:99:40:a9:41:1e:82:f9:f7:46:35:
92:9b:5d:3b:7d:91:25:95:45:de:fe:7e:03:1c:0e:
8d:83:3b:eb:cb:af:54:10:93:26:23:aa:cb:33:77:
ae:3e:02:b0:85:bb:f0:a6:b5:ec:50:56:d7:09:4d:
70:15:f8:9d:3f:7a:43:e7:d5:bf:23:cf:61:e6:d2:
59:3f:e9:8a:ef:1c:14:b8:4a:fc:a7:b2:cb:cd:75:
6b:bb:5f:39:4d:7f:ca:66:b0:69:b0:f5:89:3a:84:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:EA:CF:41:CE:B3:65:3E:FE:EB:35:94:1C:DF:DF:DA:8A:33:E0
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:b9:de:4c:81:5b:b0:54:6a:f2:7a:32:c9:f8:ff:d5:76:
61:3c:e2:16:01:c7:7b:4b:8a:b3:c1:1c:60:0b:35:c7:34:cf:
1a:ab:ea:2c:7c:aa:2f:ba:5c:88:90:d7:c9:26:94:35:8b:66:
70:cb:91:22:f6:8b:d3:1c:e9:c8:c5:b2:00:a9:f5:10:84:04:
31:2a:33:31:7a:8a:f6:55:61:aa:ba:87:ad:14:4f:b6:58:3b:
e8:c5:81:8b:62:41:64:7b:bc:a9:0f:03:9a:5e:49:e2:02:13:
e6:ba:8a:1f:56:b2:5c:7f:80:3b:bf:e7:29:76:30:7e:8c:74:
35:38:5e:da:0a:b8:7b:64:81:f6:48:78:ed:bb:72:70:fe:f1:
c9:09:f8:fd:fd:3b:92:8e:88:f1:e6:d0:15:af:9a:0b:07:3f:
5c:92:74:0b:ba:03:fc:81:1c:a3:9c:6b:6a:69:ea:d9:7f:79:
d9:27:d3:31:f4:eb:48:58:ed:c3:7e:e6:e7:54:39:3a:f7:9a:
9b:6e:e2:f3:de:d8:33:08:bc:22:d0:0a:76:c2:59:4d:96:67:
ab:12:4b:3a:ef:8f:7c:1e:15:ad:a3:c8:6f:16:0c:d4:cb:d2:
26:37:3c:48:c8:6d:af:56:3a:ae:d9:61:9a:23:19:ae:8d:d0:
bd:a1:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:49 2025 by rpki-client