Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: ayl6efXqye2uIUXo7n8s81If+e8C843zdleMRTuhGjY=
Subject key identifier: 67:A3:46:92:68:74:A3:2A:AE:C8:20:3D:67:16:36:D9:21:45:7F:A2
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 0198D7A8D5B319BC375844C86C461E988010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 0204
Signing time: Sat 23 Aug 2025 16:00:22 +0000
Manifest this update: Sat 23 Aug 2025 16:00:22 +0000
Manifest next update: Sun 24 Aug 2025 16:00:22 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: iHCGkn/UdkIZ++YN0a2lcFDxqMkFEh6MVkd8oqYMMOs=)
2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d5:b3:19:bc:37:58:44:c8:6c:46:1e:98:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Aug 23 16:00:22 2025 GMT
Not After : Aug 24 16:00:22 2025 GMT
Subject: CN=67a346926874a32aaec8203d671636d921457fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:a0:36:ec:a9:59:c1:0d:e7:0d:0b:9e:d5:
23:92:0c:6e:1e:15:b1:e0:0d:60:bc:a4:9f:03:7e:
9b:18:97:95:9f:10:a0:fe:99:3e:7d:aa:2c:8b:d3:
17:b7:99:44:fa:50:f2:c3:27:50:c1:00:65:0e:f5:
c2:78:0e:ac:f3:c8:7f:9e:8d:bf:de:a6:30:8d:a4:
60:58:36:29:18:09:4f:03:5c:11:fc:dd:0d:80:2c:
05:ed:96:50:e2:e7:e2:02:fe:9e:ca:b7:11:d9:53:
f1:91:da:a6:23:1f:80:f8:3b:c3:0e:ac:7a:97:9f:
de:ff:21:1a:2a:41:9d:d7:59:3a:eb:1f:af:76:19:
80:46:72:34:c3:e1:81:71:33:85:23:1b:5c:37:f9:
ef:d0:36:45:2a:3a:30:87:f7:2f:d4:7e:a7:15:d2:
f9:99:c3:b5:ac:74:d8:26:dd:6c:2f:80:20:d8:ec:
2e:95:c3:48:f3:89:ae:f9:21:0b:8c:df:0f:7f:bf:
d0:a1:b9:75:99:80:32:10:42:ae:5e:fe:78:79:cf:
43:36:df:04:fb:c4:4b:03:e0:41:45:7a:3e:72:ea:
10:49:d9:76:d5:0e:79:94:f0:e8:a1:6a:da:16:8d:
0a:4a:d9:18:cb:74:ba:b6:99:db:50:63:5c:39:e1:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:46:92:68:74:A3:2A:AE:C8:20:3D:67:16:36:D9:21:45:7F:A2
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:36:7b:37:b0:17:b6:07:11:6c:4f:be:71:a1:a7:9d:76:91:
06:27:ef:3a:91:28:bb:3b:43:2b:47:ca:b7:aa:5c:74:ad:b7:
a9:d1:2a:c0:69:00:e6:bd:93:9b:90:56:0f:5a:88:2b:cb:41:
bc:c4:57:e1:1a:80:db:df:1b:86:0e:0a:74:50:6d:79:8f:56:
40:35:ab:8b:e0:3d:66:e6:23:67:48:7a:81:51:ab:bc:1e:f7:
05:78:53:78:1d:dd:80:e0:c9:86:12:4f:94:af:9a:7f:aa:56:
bf:8c:fe:a1:64:f5:ea:da:4c:c7:bd:29:c6:9c:e8:95:13:1b:
8a:41:26:59:32:00:0b:53:d4:f8:59:fd:cb:d7:31:5f:c7:bf:
7f:6e:fa:65:b1:75:dd:2f:cd:8c:ec:19:78:a3:4e:53:14:27:
5c:e9:6f:4c:7a:1d:75:c7:14:54:bf:45:57:e5:ba:0c:80:2f:
88:de:bc:3f:4c:ee:78:fb:63:3e:ed:17:a0:f3:a7:40:40:56:
9f:fc:16:24:a5:2f:15:a5:a3:9c:87:3f:42:43:37:c4:f6:e5:
05:bd:17:2a:4f:b8:7b:97:c6:88:90:45:55:55:6c:8c:fe:d5:
97:2e:2b:1a:f1:28:d9:63:c0:94:7a:5e:ed:77:da:b1:1a:33:
23:f6:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:07 2025 by rpki-client