Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: D067ObRjJBKb94gxa0+HM5OzRmLjfoH5xKaINb9lC6E=
Subject key identifier: 94:DA:D7:E5:90:98:C3:3B:3F:79:3F:EC:4F:D9:A5:B2:99:F4:22:CB
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0198D4A7CC46B4A631EED4B59654D73C625E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 061C
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: RwjWQlPC1TWjfK+VQ4zWN/o/ix6Y5VXtOGuGjChlE8s=)
2: rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa (hash: 0BWjtnz0dvROb8BSYgsrsPvNfL11ilpff5syBRFzFkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cc:46:b4:a6:31:ee:d4:b5:96:54:d7:3c:62:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=94dad7e59098c33b3f793fec4fd9a5b299f422cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:18:45:8d:a1:9e:08:85:e1:ee:4a:6f:8a:
56:a7:7e:2f:10:5c:9a:fa:36:9a:56:bc:cd:f0:ff:
a7:d4:1b:11:9f:0f:a4:28:cf:7a:91:7c:7d:de:a0:
9c:52:2c:30:28:df:83:44:69:56:f0:62:dc:03:35:
ba:ac:ab:20:14:f2:6c:65:38:1b:ae:2d:9a:75:eb:
e2:a9:ae:40:50:95:b0:4f:8d:44:60:9e:77:c8:7f:
01:ab:c2:2f:bf:2a:a4:38:e2:48:e1:f3:39:87:0d:
32:61:87:09:e6:4c:88:2b:a5:88:8d:0a:77:ae:fc:
22:f3:04:eb:74:dc:fe:37:ee:12:91:0e:82:d6:16:
6b:64:62:59:fe:25:d8:4b:6e:ea:ee:f5:4e:db:56:
23:e0:d5:83:c6:24:8f:ad:00:7c:f7:0d:c0:46:79:
23:01:95:3f:ed:d2:49:d7:31:25:d3:2f:6d:18:b0:
19:f3:89:eb:58:05:cf:d0:48:ec:b6:4b:38:71:6a:
a5:52:08:70:ac:00:ef:2e:c3:67:7e:ab:0d:83:ec:
ff:9d:71:c4:28:85:ca:6e:88:71:6b:75:bc:6a:93:
91:11:1b:22:41:80:2f:83:f0:61:0c:3b:ed:5a:c4:
20:2e:8b:73:09:46:83:d7:f6:69:0b:66:7e:07:6a:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:D7:E5:90:98:C3:3B:3F:79:3F:EC:4F:D9:A5:B2:99:F4:22:CB
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:21:c1:47:84:5f:cf:40:e1:d5:88:5f:ca:78:8a:10:31:a2:
a6:7a:2b:e5:a2:02:39:59:7a:56:96:d8:89:aa:1c:04:92:0d:
ee:15:61:4f:04:74:87:d4:c8:63:ce:d8:af:9c:5b:e8:ac:ea:
5e:6e:5d:62:ef:10:43:ff:a5:10:6c:02:17:90:99:29:40:a7:
11:bc:e3:69:e2:46:3e:1d:1b:d1:a6:82:7a:5f:43:46:3a:3c:
f6:34:a3:43:7d:b3:64:1f:e6:92:d4:a3:6b:65:d1:ef:e3:4d:
bc:be:58:90:05:dd:0d:a9:02:37:e4:c0:71:6e:0d:0c:15:39:
2d:fd:b7:a5:0c:42:b1:5b:d0:dc:9b:22:12:80:07:b2:5f:76:
f5:ac:20:e3:83:df:ae:17:b1:08:41:1a:55:8e:22:e1:c7:25:
3a:04:3f:60:f3:8e:be:86:67:fc:8c:80:15:f9:65:82:5d:8d:
5a:3d:df:33:85:7a:d3:9b:9d:45:a5:f5:8b:31:19:2a:ad:f5:
8c:f5:f0:65:e0:33:4f:d2:b3:3c:ec:7f:05:f6:1f:f0:46:6b:
12:cb:a9:c2:dc:b7:0b:94:bd:98:67:e5:1e:03:dc:ab:84:36:
b1:b1:98:c9:a6:94:b9:2d:04:5c:8b:76:6e:ac:1c:02:c0:10:
ba:33:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:55 2025 by rpki-client