Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: GvJukusJQXTWO/SwiEZi8rAFM5ny1lFcGdvSGQ2djK8=
Subject key identifier: 13:39:AF:8E:05:5A:2E:3F:B6:B1:3D:96:C6:8C:F2:B0:36:AD:F8:C5
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 0198D473B2CC6AAB35222D596FF93B8B6D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0D68
Signing time: Sat 23 Aug 2025 01:03:28 +0000
Manifest this update: Sat 23 Aug 2025 01:03:28 +0000
Manifest next update: Sun 24 Aug 2025 01:03:28 +0000
Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: 34HiceibErVuIWFf71kjKWFJ/oMyXsNeQ8BsWXzZ0Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b2:cc:6a:ab:35:22:2d:59:6f:f9:3b:8b:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Aug 23 01:03:28 2025 GMT
Not After : Aug 24 01:03:28 2025 GMT
Subject: CN=1339af8e055a2e3fb6b13d96c68cf2b036adf8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:03:b8:1e:56:3e:c5:75:3e:7f:a4:ca:b7:
4e:9c:90:df:bd:c9:1a:4a:6d:12:31:59:48:60:b7:
10:85:85:6a:4c:25:7e:57:3d:25:23:a2:13:42:88:
d7:75:c7:9f:5b:55:12:67:d1:7c:76:c9:10:f7:2d:
92:9a:35:b2:9d:aa:11:ac:27:ac:ca:33:c1:6e:0d:
08:da:d8:c4:bd:c4:9c:9e:ab:01:2e:4f:46:a7:f7:
33:83:a1:f8:25:91:3c:9e:9c:e0:63:35:f1:4a:42:
88:80:c5:89:e1:fd:da:35:30:5b:9b:1a:1d:40:41:
cb:7a:ac:db:59:cb:ab:e5:d1:e0:1c:55:1d:6c:83:
dd:f6:7a:b2:61:99:1e:eb:b1:1e:c9:55:69:c2:68:
06:0e:69:2c:79:fb:46:11:e3:f5:4f:75:05:44:f3:
a9:a6:2b:25:97:46:90:35:7c:23:d5:47:c7:0c:f7:
73:c6:fb:d5:78:c2:72:3e:a0:68:6a:85:d2:68:6d:
30:07:98:26:f7:ee:71:40:a6:a5:c1:a1:f8:8f:dd:
c7:57:04:15:f2:30:98:4a:82:8b:77:e7:19:36:9b:
b3:2d:b3:9a:cf:02:19:fb:a9:77:21:f0:07:d8:ae:
79:35:22:c6:ce:30:e7:46:75:c0:64:2d:9b:4a:6e:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:AF:8E:05:5A:2E:3F:B6:B1:3D:96:C6:8C:F2:B0:36:AD:F8:C5
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c5:f1:84:5f:88:ed:86:2a:34:ba:94:81:28:6b:a7:65:00:
76:f9:17:12:7c:62:50:4b:6e:5c:83:50:84:70:2b:04:4e:8e:
25:db:a8:c3:c1:62:16:da:48:9d:ba:00:4d:a1:4d:b4:79:13:
1e:10:fe:44:0b:0b:93:31:7d:44:2f:25:3d:9f:2c:2f:df:fd:
87:0b:17:f8:fb:17:75:78:1d:f9:9f:98:88:8a:62:da:50:59:
7d:51:23:78:77:92:55:ed:5c:a6:c4:a1:a2:2f:fb:3b:2c:ce:
ed:1e:91:a7:67:11:fc:93:aa:95:52:b5:84:e4:0c:1d:2b:dc:
88:17:a2:6c:ae:5c:fd:ae:c3:b2:e6:96:54:8d:dd:d3:04:90:
ed:10:91:88:bd:92:16:ef:fb:1b:2d:70:11:45:95:a2:9f:d0:
7b:a5:cd:95:64:d6:75:70:9d:8d:2a:bb:d2:e8:b3:8e:35:59:
24:1c:d6:91:50:ae:55:fe:2d:9c:f8:a7:79:be:df:ed:03:53:
ba:db:a0:3c:ec:4e:19:93:b9:98:75:51:12:49:2a:d5:11:81:
ca:31:f0:93:da:1e:11:65:41:4a:df:cc:b8:93:5e:89:f1:89:
0e:a3:78:a5:00:b6:65:b3:26:b2:09:2d:af:60:b5:f8:0e:1b:
8d:fe:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:49 2025 by rpki-client