Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: jlhrLHomB8mjMcEfxqXSPAMzqJxwegbSnDnNCX/ph7I=
Subject key identifier: 3F:08:17:AF:8F:B5:A4:6F:BD:CE:7F:C1:14:7E:C1:BF:BC:CB:81:2F
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 0198D5BBA960E2BFAB9027EB15C3AC4D652B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 05DC
Signing time: Sat 23 Aug 2025 07:01:42 +0000
Manifest this update: Sat 23 Aug 2025 07:01:42 +0000
Manifest next update: Sun 24 Aug 2025 07:01:42 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: C/JKOqBuNt0KRTtKUL2XGmp64kHrequD4/c/bvRFpkQ=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a9:60:e2:bf:ab:90:27:eb:15:c3:ac:4d:65:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Aug 23 07:01:42 2025 GMT
Not After : Aug 24 07:01:42 2025 GMT
Subject: CN=3f0817af8fb5a46fbdce7fc1147ec1bfbccb812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:9e:33:e0:a5:73:1f:8d:f5:89:c0:e7:7c:
00:2c:a4:77:1e:7b:22:85:a4:e3:8b:ad:14:56:05:
ad:a9:cd:92:d4:f7:b6:28:c2:d2:05:22:59:9f:cc:
37:92:71:70:7b:d3:bc:39:fc:84:f0:fc:e4:91:b7:
c7:72:74:65:67:0e:27:a3:3d:37:67:66:58:1d:11:
7f:bc:e3:23:cb:20:ae:e6:44:6b:4c:d0:c8:2b:e2:
2e:e7:58:a1:32:4d:a5:4b:47:e5:54:b5:77:d4:35:
2d:0b:a4:fa:03:f0:13:1d:8d:ed:0d:0e:43:99:20:
26:77:6b:50:3e:d1:0e:4a:37:d3:af:e7:37:fa:cd:
8b:4c:a0:1e:bc:c9:a6:e5:36:f7:5c:98:94:a7:ac:
79:4d:5c:f6:0f:e5:01:a8:44:f2:f0:42:f2:31:c6:
1c:c7:7c:fe:50:ac:43:33:42:66:27:a6:60:7b:1a:
e9:73:a8:84:96:21:47:a2:c8:e7:57:77:8c:fa:a9:
22:74:ff:b4:98:07:57:ec:18:c6:e1:91:2f:70:fa:
79:9c:7c:ed:05:fe:ec:e4:ef:c9:17:d9:07:a1:d7:
54:e8:70:e4:e0:42:47:77:d0:a3:ac:ed:a4:c5:05:
f7:88:37:1b:fe:7b:c4:bd:4b:b8:1f:ca:e4:6e:ee:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:17:AF:8F:B5:A4:6F:BD:CE:7F:C1:14:7E:C1:BF:BC:CB:81:2F
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:da:50:0a:15:a8:95:9b:b8:3e:c9:67:e6:a7:22:f3:53:
9c:19:1d:35:b0:f2:48:db:62:b5:ea:b6:e3:c7:aa:23:80:d4:
01:ff:f4:e8:aa:86:47:45:36:8e:8c:7c:19:3c:6f:52:13:f8:
9a:7b:18:f7:13:f8:d3:f1:a1:56:48:2c:b6:04:1b:63:fb:03:
7c:ab:5d:c1:d3:7e:db:d8:5e:3a:d6:11:22:f8:52:7b:65:6c:
f1:50:e6:f7:11:38:50:ba:ae:b3:a1:00:49:01:9f:45:36:64:
08:67:95:fa:11:9b:a5:c1:0f:0e:dc:62:b1:ba:3a:da:24:b5:
cb:ec:4c:a4:3a:1b:cc:17:e1:3e:ab:fd:12:7d:2d:0e:5d:63:
d4:df:cd:ac:c6:6c:3a:90:d7:6c:59:0d:e3:83:9a:d4:f2:65:
cb:99:b1:8d:3b:59:23:a6:a9:de:5e:6e:f3:29:f7:7c:c2:b1:
6f:ba:54:22:89:57:c0:b9:78:4b:fb:97:07:96:b7:40:b2:17:
e4:07:0c:36:4d:f0:6b:55:ba:be:b8:79:17:2c:93:a1:c7:f1:
18:2f:d1:ae:5f:c0:e3:6a:34:06:d3:c8:77:da:12:1d:df:a2:
56:95:aa:15:07:f6:1f:6f:96:a5:bc:77:a5:f4:9b:79:a1:21:
c5:d7:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:28 2025 by rpki-client