Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: hX2+781ZpcKcJetJLFYNvDdbiXP7ptBTPovIW3J/Ibk=
Subject key identifier: C4:03:41:2E:4B:DB:51:F3:DC:CB:0A:24:99:7E:A7:2D:76:7F:0D:73
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0198D4A85387B3DFD327044EB96A3E2B797D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0A12
Signing time: Sat 23 Aug 2025 02:00:57 +0000
Manifest this update: Sat 23 Aug 2025 02:00:57 +0000
Manifest next update: Sun 24 Aug 2025 02:00:57 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: BVI7tMP1OijK7knoavlXwBJaGEsqJg7dIqEk8HNdLig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:53:87:b3:df:d3:27:04:4e:b9:6a:3e:2b:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Aug 23 02:00:57 2025 GMT
Not After : Aug 24 02:00:57 2025 GMT
Subject: CN=c403412e4bdb51f3dccb0a24997ea72d767f0d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:07:23:5e:9c:79:d1:38:e7:a0:a0:72:b3:
51:ee:2e:ce:e0:82:10:b4:f1:5e:6d:a1:fb:39:63:
ea:fa:1e:8e:5e:ae:cb:65:31:38:f1:68:b2:f6:06:
87:e0:1b:48:d3:35:21:ad:1f:8c:b5:9d:8d:bf:55:
29:0c:5b:af:62:de:2d:bf:03:e0:be:8d:e6:a9:35:
f8:e8:31:fd:1a:99:74:bd:8a:f1:49:06:22:df:92:
24:20:59:21:f0:d1:67:48:b2:0b:ab:e2:b3:07:c4:
14:ae:f5:26:f3:75:78:39:2c:1c:dd:bc:72:a7:1c:
34:a6:44:d7:c2:2c:7b:83:1c:fc:42:5b:d3:1d:b4:
a7:4b:e2:62:1e:3e:af:8d:1c:0d:fa:12:7a:48:af:
68:33:7b:e6:ed:80:25:7f:10:bc:5c:ca:a5:95:1a:
e1:93:cf:38:04:98:54:07:6e:e4:d1:12:b5:67:1d:
ae:29:12:f2:f4:b6:f0:6f:0d:73:77:ca:17:71:26:
87:27:d6:3c:ff:b8:d9:7e:b0:04:ff:55:f4:41:f0:
0c:66:06:6e:92:7f:fe:05:0a:d7:14:dd:3e:c6:e0:
01:36:ef:f4:51:c3:23:0c:04:df:01:52:1e:9f:05:
52:42:78:15:b5:01:39:9b:8a:19:2e:8f:38:02:26:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:41:2E:4B:DB:51:F3:DC:CB:0A:24:99:7E:A7:2D:76:7F:0D:73
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ad:9b:fd:8d:07:0e:3a:c8:f3:9c:53:5d:78:ec:a3:6f:9b:
77:28:6b:82:5e:ab:f4:1f:fa:78:f7:56:3c:1b:d3:4e:e8:ba:
29:e4:1d:67:78:d8:ff:d4:1e:8c:c6:78:d4:89:c5:aa:b1:1e:
9a:ec:3a:6e:50:0f:b9:3c:33:88:a7:24:92:e9:fc:a0:46:a4:
58:fa:69:9f:2a:3a:b4:ae:c5:ff:7f:dd:a1:4c:af:58:e0:6d:
41:a8:b8:ca:a7:1f:df:47:ba:7f:7a:0f:9b:d1:8e:83:c4:2c:
41:ef:72:83:25:55:53:0e:5a:96:2c:0d:48:2e:e1:03:59:91:
6b:f9:58:80:d6:ca:8e:5a:0a:fb:09:0a:b2:5a:04:4b:b1:09:
d6:f9:fd:6c:33:e6:34:1e:55:8b:9f:87:d2:df:40:02:36:1d:
38:b6:01:91:d4:2b:56:43:e3:59:43:8b:96:d8:cc:1a:80:dd:
62:03:b1:07:d2:e3:5a:79:91:b4:8f:81:76:28:55:79:8e:e3:
d6:de:72:9a:ca:fb:38:32:ab:de:4f:bb:b7:bf:3e:1d:11:8b:
6a:2c:06:e1:f8:10:02:9f:6e:6c:8c:ca:1b:d2:ea:6f:9e:f8:
41:3e:a3:a6:03:40:94:d7:76:20:d5:df:d0:7c:9c:44:49:31:
df:3c:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:17 2025 by rpki-client