Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 0aT80WNIt7BOlcJxJua2FtkTzMKzXk7XjOwxvxJKijk=
Subject key identifier: 04:4F:65:4B:F2:77:40:6D:45:7B:77:BB:FB:C2:82:EC:8F:49:78:1B
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0198D4A860E729958EA6062D6E713F235C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0EBE
Signing time: Sat 23 Aug 2025 02:01:01 +0000
Manifest this update: Sat 23 Aug 2025 02:01:01 +0000
Manifest next update: Sun 24 Aug 2025 02:01:01 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: XmQA+RGbwxcRNjvem+q7fhwNElQWortrSKACtfFC0KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:60:e7:29:95:8e:a6:06:2d:6e:71:3f:23:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Aug 23 02:01:01 2025 GMT
Not After : Aug 24 02:01:01 2025 GMT
Subject: CN=044f654bf277406d457b77bbfbc282ec8f49781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:07:15:f0:f2:20:30:16:fe:22:89:ed:21:
90:d1:73:7b:24:9c:5e:b3:d1:d7:46:b8:cb:70:cf:
f6:d8:f2:b4:b6:92:d4:ef:8e:d8:dd:83:7e:6a:58:
02:d7:3d:bd:1a:aa:0a:e2:43:83:dc:18:fc:33:3b:
6f:01:24:d6:32:77:f6:73:88:b0:ab:96:e4:0d:35:
37:23:b0:38:a4:c1:69:5b:a9:64:f6:ae:a2:25:e2:
53:a3:ce:5e:a3:0e:f0:04:84:48:5f:de:00:f2:80:
ed:7e:73:36:02:1c:fc:18:12:a7:e6:6e:b6:4d:5c:
d8:18:13:b8:0a:a9:e1:9a:7d:07:af:6c:93:68:50:
70:7c:b1:da:44:44:fb:fe:30:f7:af:3a:5f:d5:5f:
e3:00:45:60:25:72:d4:53:68:38:94:7f:f4:89:13:
bc:ba:f5:29:86:20:8d:9b:b6:45:19:a0:dc:47:f6:
b1:2d:78:d3:00:05:a8:bf:d6:7f:89:af:9b:bb:9e:
1f:26:0c:69:39:c5:b8:80:ea:62:d7:26:33:6d:90:
14:03:c8:0c:5a:d7:c9:34:4b:aa:8e:15:1f:4e:82:
5e:90:49:91:07:35:b8:47:a9:2e:2e:76:82:a1:71:
e4:c2:ce:5e:73:80:66:a8:3d:27:35:3c:6b:42:b9:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:65:4B:F2:77:40:6D:45:7B:77:BB:FB:C2:82:EC:8F:49:78:1B
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:50:0f:13:87:ed:10:db:1e:2f:44:f8:4a:7d:48:49:2e:94:
a2:80:8f:8e:e5:cb:33:55:7c:6a:79:81:99:72:4c:31:d1:50:
2d:e2:60:c1:42:c5:c7:25:2e:16:c7:9c:c7:01:68:59:84:0f:
0a:fa:86:95:be:1b:6e:92:c2:bd:26:8e:ba:21:89:11:a1:13:
60:85:43:43:b8:d4:e7:6a:24:ac:35:c0:46:a3:df:ba:9e:5d:
49:4b:3b:37:cb:28:00:9b:1a:d5:bf:e6:0d:f5:5e:6c:d6:21:
b6:b5:a3:5f:50:80:4c:19:35:f6:f8:7e:6e:ea:b0:50:67:70:
26:16:09:7a:08:8b:11:27:4f:a1:36:62:b5:72:10:60:2b:c8:
20:63:08:8d:bf:16:70:29:aa:bd:f8:39:e1:7b:06:e5:aa:f3:
76:ac:e7:4d:b7:a9:32:75:11:06:b7:0c:78:84:b1:f2:5e:29:
4e:19:4e:72:b0:b2:fd:bf:6c:5b:ad:da:fa:cd:eb:bb:5f:25:
2f:26:28:20:ad:f5:42:48:de:6c:2c:56:a1:e7:35:af:df:c5:
4e:8d:9b:ba:3f:da:38:11:a8:b6:82:60:5f:38:69:d4:91:24:
5f:b9:dd:0f:a1:6d:7f:c3:45:9d:3a:27:d0:53:98:2d:28:74:
69:a0:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:23 2025 by rpki-client