Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: wusoJ14tLXpbf8MaE8MPbm0xGnHMrRxGOTaHYVJQhGo=
Subject key identifier: 2D:A5:88:1C:05:C0:97:AA:7D:13:62:19:AA:FD:5E:60:77:FC:62:48
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 0198D54E42A55E02E3BFA66F87B835CF0747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 0DCF
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: Wmw87mor3Qqqmkuhwb+aeIbWSCx/+miRf5dn6LUwTAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:42:a5:5e:02:e3:bf:a6:6f:87:b8:35:cf:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=2da5881c05c097aa7d136219aafd5e6077fc6248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1a:ce:56:80:6e:c1:f8:cf:5a:b9:b8:94:2c:
d8:63:de:3c:80:d7:85:25:44:45:bd:13:9e:bc:1a:
ea:92:6a:a5:65:13:12:71:52:fd:f1:1e:e2:91:da:
a6:a6:10:16:d4:30:61:02:30:05:8f:d5:2c:46:3e:
fa:6e:d0:0a:66:d2:33:0a:4a:d9:f3:f7:8a:ac:6f:
ad:80:e8:9b:18:27:ac:79:7a:29:68:ef:73:34:1c:
a6:83:78:4c:b6:6d:dc:62:b9:b5:23:d9:9d:92:4e:
35:30:cd:ac:08:e4:49:a2:4e:ac:cb:d5:a2:2f:c2:
5b:dd:fe:22:57:63:ff:bb:f9:a5:59:6c:1a:98:b1:
9b:7d:23:ac:44:c9:31:01:59:4d:fb:0e:3c:95:5b:
ad:af:ea:a0:87:4d:4e:c8:71:e6:29:4d:91:df:a6:
d0:d9:40:11:36:39:63:9a:4b:d1:c3:e2:84:f9:fe:
c9:d3:48:c5:74:6a:6d:5d:ed:ab:c1:27:66:aa:bc:
76:4f:2f:77:80:9f:3a:87:80:e5:c4:d2:06:54:3e:
2e:0a:18:d1:c7:ca:3f:95:2b:1d:a7:1f:92:9d:36:
12:5b:1b:11:67:ad:df:14:8b:d6:13:18:86:8b:85:
3c:38:61:b1:d7:40:e8:b5:69:8b:65:e0:2b:ee:9b:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:88:1C:05:C0:97:AA:7D:13:62:19:AA:FD:5E:60:77:FC:62:48
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:e2:53:ea:88:ac:36:2a:7a:5a:8f:38:84:11:db:e8:4c:
47:e3:48:56:96:a6:f8:85:fd:33:c3:76:65:ab:e5:c0:75:fc:
97:ea:ee:5d:46:86:d1:ec:e5:32:c1:bd:19:d6:98:d4:a4:f0:
58:f3:89:f1:57:6b:78:c0:ed:40:c4:6c:f8:c3:d6:36:bc:4b:
e5:4d:5c:a6:a2:b3:02:47:42:21:8f:e2:45:1c:78:d7:a3:e2:
f4:ca:73:3f:b1:b6:89:a3:cb:a4:7f:e8:22:fb:e8:de:09:02:
07:a2:88:ee:9a:a1:20:63:0e:7a:a1:17:56:d9:87:d9:fb:84:
d2:c2:d1:e1:0e:98:62:49:40:99:23:5d:ab:62:b9:af:fe:fb:
75:0f:1d:10:35:88:56:ed:de:af:4e:bc:87:29:9b:70:4b:e4:
f0:89:08:4f:31:7e:95:fd:04:c8:ff:d8:b4:28:b7:8e:8d:ff:
27:30:4d:58:7b:75:31:c4:e9:fe:0f:33:07:17:58:bb:2d:39:
74:57:3e:75:58:46:7e:62:df:9f:f1:97:5d:ca:c7:7f:3e:ac:
ee:38:84:35:b3:7d:5a:3c:55:d7:52:71:52:35:9f:0e:72:44:
f9:57:ac:3c:bc:64:89:d0:64:17:e7:43:a1:7e:8e:eb:c3:07:
26:52:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:28 2025 by rpki-client