Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: rmu4cSwgPrQJF1rqDecHuW21ZaV4YGlYusEYNxxQCDs=
Subject key identifier: F9:66:C8:2D:10:38:97:67:22:68:18:92:3C:B1:95:97:78:4B:05:F5
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 0198D54DDF290A9D4E9D7DDD8F080B331637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 0156
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=)
2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: WByBxiEZZUgJ6d6Sb4HDF8RuEjezozMbh5fQZl1gD84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:df:29:0a:9d:4e:9d:7d:dd:8f:08:0b:33:16:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=f966c82d10389767226818923cb19597784b05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:64:6c:b6:58:f2:65:76:48:26:c0:52:d3:
42:4a:39:f2:87:06:fb:03:18:89:7f:86:26:4c:6d:
fb:52:12:73:74:1f:22:05:8a:81:16:d8:45:10:c4:
3b:c5:07:f5:e0:52:b8:52:a8:cf:76:73:d5:4c:e4:
b5:9b:2c:72:e4:8c:8a:21:bc:e7:c1:b4:87:32:3c:
cf:57:63:de:89:30:a6:ee:49:ea:28:50:f8:41:b7:
d1:b1:5d:23:ed:80:12:ca:c5:8a:b9:a6:a7:eb:c6:
04:99:2b:88:16:9b:a2:26:3c:d9:b1:60:f7:78:26:
c0:18:2c:ab:03:32:70:27:ec:1a:d5:e5:05:1d:23:
f1:13:ae:e1:18:11:f8:ca:2c:9f:b8:bd:99:c6:df:
29:d2:51:7d:04:52:db:7c:19:93:33:8e:ba:07:c1:
25:30:a4:d7:3e:36:37:eb:12:8b:e1:ca:e6:60:20:
6e:b4:aa:7b:9d:9f:c2:b9:77:d3:44:a1:12:b2:d5:
27:b8:79:22:dd:f8:e4:6d:b9:a6:49:e3:e4:15:4c:
19:bf:76:73:26:8b:22:51:d2:66:e7:92:9f:e7:dd:
a8:09:d3:37:98:20:34:7e:2d:c1:32:ab:7e:3a:9c:
27:b7:e8:74:bf:69:fc:21:6a:cb:0d:23:27:ee:92:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:C8:2D:10:38:97:67:22:68:18:92:3C:B1:95:97:78:4B:05:F5
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:71:e8:99:a0:20:2a:8e:bf:0f:f1:93:9e:a0:c4:c2:b5:
96:fc:85:37:09:33:f0:32:42:06:b1:b4:ef:44:90:b8:05:35:
b7:a3:5b:03:69:4f:23:14:58:ac:1f:f5:d3:61:9f:8e:1c:27:
da:c3:de:af:5b:93:11:b4:72:4b:c8:72:c5:67:60:4d:2e:56:
5b:a3:33:b6:13:6b:97:34:2c:76:f6:84:a1:ff:1d:82:52:be:
25:1f:49:e9:b0:56:5d:bb:2e:06:a3:46:2b:00:f9:99:ed:e1:
f9:7d:90:e4:0d:6e:12:df:cb:93:ca:23:05:b9:ea:67:34:48:
a9:e2:88:f8:4b:c2:7c:14:63:da:1f:92:4e:cd:5b:c0:d8:e1:
1f:8e:0d:68:cf:2f:fc:6b:fa:82:a9:a1:ba:86:d1:02:c0:f2:
ec:d4:d7:1c:eb:f2:55:1f:6e:62:e2:34:9e:e1:c7:f1:03:47:
10:b0:ac:54:39:71:72:d7:ab:16:4c:4f:36:f9:36:31:8f:12:
e8:f5:a8:fb:12:06:07:79:1b:1a:f1:36:08:20:72:c6:87:1c:
13:0b:ea:e6:73:55:9a:a9:df:62:18:a3:87:07:ef:24:5e:27:
ad:65:43:77:01:c5:7c:2b:e0:27:42:d1:4a:75:02:28:37:b4:
ef:87:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:36 2025 by rpki-client