Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: HUT0pJsEzjlbvMq97u0p30YH1MC2LD5DZEnk3XWZI5k=
Subject key identifier: DB:CA:7E:F5:53:D4:ED:08:04:6D:CB:74:BE:C0:53:3D:51:4E:99:E0
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0198D4729C1A695D6984B691A73E5FD2B7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 1346
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: rw70nMOs67ysGSqwX7HvcULRRaKPOHnI9Lom3hwCFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9c:1a:69:5d:69:84:b6:91:a7:3e:5f:d2:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=dbca7ef553d4ed08046dcb74bec0533d514e99e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:22:f4:89:bc:7c:9c:76:e6:58:31:8a:79:
1b:50:7d:aa:c0:0c:c7:75:b6:2b:b8:e1:17:88:f3:
1a:fb:6c:33:c2:f0:7e:d4:74:30:b5:14:df:e8:6e:
7a:d6:55:fd:a3:f5:82:80:6d:42:a5:05:dd:9e:16:
30:a8:3f:b7:e8:4f:02:13:95:2d:9a:8b:5e:f7:4a:
30:09:57:b6:27:07:5f:7c:77:00:e3:36:4f:a4:23:
28:27:02:ac:d2:9b:8b:e8:71:f4:1f:c7:bf:c0:fa:
e5:b6:19:bc:27:57:1e:b9:df:f4:2a:25:72:1b:15:
b8:58:f6:80:e3:35:f2:77:20:8c:96:e8:55:fb:be:
7a:83:b0:62:9a:70:b2:63:61:75:84:7c:45:50:42:
fa:8b:c3:5a:75:7d:92:8d:2c:1c:ce:04:f8:dd:b1:
f1:ff:ff:d2:1e:f9:74:c3:94:79:79:3d:cb:8c:08:
7c:e5:d8:18:e5:31:2c:d5:43:33:d9:5b:df:ed:51:
78:e2:5c:0d:55:f0:84:82:3d:de:c6:c1:ca:b4:93:
a3:58:63:58:5a:90:b8:c0:4f:f3:1c:39:55:08:32:
05:0b:ea:06:ac:9a:09:33:1e:66:7d:e0:f5:a9:6f:
0c:c5:25:48:57:5b:1a:7c:3d:1a:2f:5c:31:f4:e5:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:7E:F5:53:D4:ED:08:04:6D:CB:74:BE:C0:53:3D:51:4E:99:E0
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:1c:0d:e1:18:33:85:b0:82:22:18:15:85:8a:ea:1d:73:
ca:81:cb:e7:40:49:e9:1e:ba:66:08:5b:28:7a:94:e0:ca:7d:
51:da:10:64:57:33:90:a6:28:e7:2a:99:f9:66:10:5d:5b:e5:
0e:7d:2d:66:25:87:76:56:65:37:16:80:19:8d:9e:3c:17:e1:
d5:32:21:2f:1c:55:cb:7b:b7:04:33:20:9a:c0:83:c4:78:4f:
25:2c:7d:0f:b0:33:4d:b6:03:c1:ba:73:4a:d5:6f:67:97:bc:
fd:94:2e:25:2a:35:7d:55:04:14:c0:af:33:cc:28:de:1b:3e:
95:68:a7:7a:31:f0:5e:53:0a:06:db:f1:85:2b:7c:e4:38:24:
d5:f5:fa:47:70:56:bf:2b:eb:8b:ee:f0:9e:46:e4:d0:84:bd:
99:75:8e:32:d8:e6:b3:b0:d8:94:cd:49:4b:21:24:5e:05:b0:
61:57:40:30:ec:1b:bc:25:e6:2c:14:f5:57:d7:50:e3:2d:5e:
13:dc:03:f2:86:66:9b:1a:36:d1:cc:d3:61:c4:ae:bb:2d:ff:
a9:35:a0:ce:eb:52:d3:49:af:03:83:4b:41:96:6d:8b:11:f8:
83:07:8c:52:6a:2e:55:a8:f3:c7:67:21:2d:ea:e9:ff:db:f7:
fd:db:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:26 2025 by rpki-client