Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: sMERbvjTUq9tm+HJtxxpKU1lI0VeuFTvkKS9+8gqbBI=
Subject key identifier: 25:49:F0:6F:4C:DF:C1:EB:46:A4:89:A1:9C:9B:B7:DC:3A:7E:41:E0
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0198D6CD213552A4E8B79F4DC9177C463AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 1205
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: o21xkkD9v3zvusYTwhNslHfucLRQwFs4yYmojFsFhYI=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:21:35:52:a4:e8:b7:9f:4d:c9:17:7c:46:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=2549f06f4cdfc1eb46a489a19c9bb7dc3a7e41e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:0b:e0:32:24:2e:20:9a:66:be:5a:0f:3b:
d7:27:17:1d:bf:0a:20:c0:77:5f:60:ab:2f:a4:39:
80:71:c8:2f:7b:44:16:6c:7e:5a:a3:6e:5a:22:3f:
c5:97:75:8e:d0:e1:92:9e:d8:32:59:d0:25:08:e5:
c5:37:09:1a:d3:93:88:4e:57:0d:2a:03:c5:03:42:
7d:f5:d7:0c:35:07:cd:93:48:43:da:8e:23:26:60:
ea:4d:c6:88:91:41:2d:4f:57:26:3c:be:23:0b:fa:
43:88:0f:e1:96:8a:a5:92:c9:93:c5:aa:83:20:e0:
70:d4:5e:43:76:97:21:94:9c:04:ba:42:d7:e7:d4:
ec:83:42:75:a6:61:2a:1c:4f:ee:21:11:4a:67:97:
76:df:1f:58:ba:b1:8a:99:b3:84:23:ea:87:7f:bd:
f9:01:47:5f:f1:71:31:bd:a5:87:b9:7f:7c:35:df:
76:f1:83:75:65:55:26:25:53:7b:67:84:be:70:70:
65:d5:1b:d7:af:25:94:b2:26:f6:7d:65:34:f4:e8:
b9:81:c0:77:b4:73:ed:67:0d:3d:44:84:b3:5a:ad:
88:2e:9e:ff:8d:f3:94:e3:30:b6:fe:fd:0b:bf:4c:
a4:75:bf:e6:67:68:59:26:a9:c3:59:6c:29:a0:ce:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:49:F0:6F:4C:DF:C1:EB:46:A4:89:A1:9C:9B:B7:DC:3A:7E:41:E0
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:7c:dc:6e:37:c3:97:4c:a1:ce:de:85:c4:9c:fc:11:12:
00:9c:48:3f:b2:fe:9c:46:82:ea:33:d6:f6:45:8e:de:cd:91:
fb:c8:01:11:60:08:46:69:b9:e5:fc:a4:c4:43:d7:96:db:e3:
a8:da:ad:5f:4d:79:e9:96:85:a3:22:2b:1c:ea:a0:14:71:9e:
3b:19:29:3b:6e:8d:34:46:d5:56:d0:4a:7a:65:a0:ce:28:36:
da:02:ef:e2:4e:c8:d0:71:b9:f3:91:61:c0:de:b8:bf:b8:e0:
f7:b2:61:d7:da:06:31:13:af:d6:fb:f1:d2:18:50:78:b7:ac:
fc:7a:d3:4c:9e:5a:6c:51:1a:75:08:69:76:f3:8e:76:30:37:
3d:5d:97:a9:46:43:61:73:3f:d1:90:51:e7:be:58:44:09:0e:
20:30:16:c8:d4:13:96:46:8a:13:56:f3:e2:d7:55:d7:11:b5:
60:84:55:5b:45:79:04:7f:de:22:ad:df:42:d8:46:a8:06:8f:
6e:aa:f2:6f:9d:56:94:1c:c2:9a:af:8f:ba:bd:96:b8:51:a3:
dd:37:d3:27:79:49:ef:63:d7:2b:55:91:81:03:2f:99:1f:2a:
f8:62:48:b4:bf:b6:39:74:8d:7a:67:95:34:8c:45:1b:f5:10:
ce:4b:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:47 2025 by rpki-client