Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: jbBCul2OkqvCs+dM5QK8t1eixs44Ae5CVtNuyGqkEzU=
Subject key identifier: 7B:03:BF:95:38:69:2C:9A:BD:0B:17:32:15:80:8C:ED:40:00:AA:9B
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 0198D65F9CA4455CC0D3FEB61139D4A86082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: G15J2UNqyy8TcJHCutuz2e9Kvgh+VnEc6xS8uNY7GmY=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9c:a4:45:5c:c0:d3:fe:b6:11:39:d4:a8:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=7b03bf9538692c9abd0b173215808ced4000aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:a2:56:e3:4a:b1:15:39:2d:eb:8e:da:b2:
98:9a:43:ae:a1:1d:ca:fc:b3:9a:fb:72:06:5e:f5:
87:20:db:ad:68:e8:d0:2b:62:ba:48:0c:52:bb:36:
8d:de:8c:b8:f3:f7:23:2a:8a:49:8e:97:a2:7c:ce:
d7:ce:a7:a8:01:d8:2e:6d:31:74:2b:94:1e:8c:03:
88:63:5a:99:b1:1b:79:47:31:b3:32:97:86:c1:19:
ee:21:fc:b7:83:8b:f3:bc:51:73:23:9e:d0:47:b7:
b3:5e:6e:de:d4:fa:41:d6:7e:7a:bb:a0:a9:ab:5b:
b9:32:c8:4e:73:b4:35:45:25:75:53:b5:9d:e7:6f:
d9:ca:c4:47:e3:f7:f9:8a:91:a7:eb:98:5d:eb:60:
36:85:f9:0c:cd:98:46:3a:5b:4e:e5:32:ab:16:4b:
65:19:e0:d6:02:91:07:20:98:79:92:c1:d4:24:8a:
77:a0:75:6b:00:41:3b:c0:c7:58:d3:21:34:ae:c3:
24:1e:09:72:05:79:f7:db:da:9a:77:11:bb:5b:1f:
27:40:41:bd:79:6c:24:b7:20:77:a6:26:f6:bf:8f:
be:f5:63:19:f4:2f:97:a6:c7:30:53:e2:27:e6:82:
b7:0e:23:21:48:5e:7d:b8:7f:b5:c9:ea:1f:87:d8:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:BF:95:38:69:2C:9A:BD:0B:17:32:15:80:8C:ED:40:00:AA:9B
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:08:68:c5:b2:31:dd:d5:de:6b:b4:59:c2:d0:80:9c:a8:
fa:e5:db:da:89:ef:ed:0d:7a:56:44:52:ac:37:15:f5:f3:00:
e7:6e:e3:de:5e:1d:cf:98:e4:10:01:0b:2a:d3:dd:0f:e7:84:
cf:2e:f2:41:4b:fb:18:b9:1a:a7:80:6a:3a:4a:28:69:d2:c8:
2a:46:a1:3c:11:47:52:23:5b:6d:b5:fd:60:47:8d:52:e9:a3:
81:27:25:9c:1e:7a:e7:d9:e5:b7:a6:92:d8:3c:c5:52:3a:c0:
ba:28:78:b0:6e:fe:7b:35:55:22:f1:cd:e3:8d:31:e9:de:1e:
5a:a0:ed:02:d3:d5:64:6c:14:f9:eb:53:c3:dc:0b:bd:29:1a:
eb:78:55:dc:24:76:8f:e1:85:e7:bc:ef:40:ce:65:a6:44:fd:
2b:ed:c5:03:17:4d:82:b1:6e:1a:ab:66:83:c0:c6:2f:aa:40:
f7:d1:18:7c:e3:7f:0c:b2:fd:99:7e:e4:40:26:6d:ea:ee:28:
28:d3:54:91:cb:4a:e0:49:a3:b5:b3:1c:de:d5:a1:9e:00:e4:
37:da:fa:e0:65:99:e6:16:53:7f:94:c5:28:3c:b6:27:19:5e:
a3:3e:01:16:db:dd:33:60:b2:5f:af:53:34:2f:c0:47:3e:0e:
78:c1:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:21 2025 by rpki-client