Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: 0yg+4N1oDGhuuDV+jP2bAh2bokwba6ofBmN21bloZ3s=
Subject key identifier: 99:EE:53:BF:76:21:67:0B:FD:E9:A8:8F:DE:8C:E8:18:51:6D:CC:34
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 0198D54DE212AB0322C5E0C96C5B478DD81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: Gh+4RZpVNhSCakNs1+lxXDNCTgv0wdjJHFcaGvGvaFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e2:12:ab:03:22:c5:e0:c9:6c:5b:47:8d:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=99ee53bf7621670bfde9a88fde8ce818516dcc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:76:ea:d0:e1:e7:c1:4d:8f:fb:28:bf:42:
e5:7d:0d:e0:a4:e6:8a:52:b1:8e:a8:9f:9d:cf:c4:
bb:7d:39:92:74:41:4f:3e:9b:3a:cb:d4:50:9b:d9:
22:b6:65:ab:6f:54:5e:99:f2:41:75:cc:23:65:a5:
a0:63:69:32:8a:c9:46:b4:d5:fa:c8:9f:3f:e4:03:
5b:aa:3c:21:dd:be:e8:60:d8:67:84:db:7c:64:5a:
bb:9a:ea:08:3f:6a:e4:cf:97:16:07:f7:cc:d0:7d:
0d:f6:e3:ac:5d:e0:9a:29:25:40:8c:99:5d:ef:ab:
d0:f9:da:0f:6f:e8:14:74:ff:ae:10:b7:f4:b8:c9:
2c:b8:7b:00:c2:71:9b:46:34:ae:cc:54:8a:87:3f:
b8:f8:88:c6:22:60:bf:d9:84:58:37:83:77:f2:6e:
d4:e0:2b:8e:46:24:47:42:a2:b8:f0:eb:0d:7e:1a:
c1:1d:92:52:f0:4e:e9:b2:78:78:65:58:90:e9:83:
8e:92:c2:ad:0b:89:4c:4b:77:2a:d9:37:c1:29:13:
d3:d6:19:37:6d:71:cf:ca:aa:3c:c5:37:40:c8:e8:
f8:7b:92:db:ae:23:36:7e:d3:a6:2d:39:99:05:03:
ca:19:94:95:a1:78:75:c6:f2:a7:47:22:59:cd:64:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EE:53:BF:76:21:67:0B:FD:E9:A8:8F:DE:8C:E8:18:51:6D:CC:34
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:b8:dc:61:41:ee:3f:2d:79:fc:67:d0:a9:5e:51:6d:c9:
53:86:70:6a:a7:b9:0c:1a:77:f7:38:d8:5e:79:4f:71:a2:60:
80:33:66:af:6c:35:bc:8b:58:3b:ac:66:64:e0:de:62:59:27:
39:a0:9a:8f:8b:a0:83:a4:ed:3c:72:2c:ec:68:41:82:1b:ab:
3d:c9:71:53:cc:1a:2f:62:2a:b2:c3:91:64:eb:05:e9:d3:dc:
2c:6e:2f:ee:fe:a4:8d:b6:54:0c:88:09:3d:19:ea:fa:8f:d1:
4e:f5:19:79:d1:7e:39:29:99:ff:e2:4f:92:10:b9:50:29:ce:
db:23:ed:64:15:2e:7d:c6:fc:24:34:1b:87:22:69:ba:55:d2:
54:71:a4:36:e6:6b:f9:39:13:54:fe:9a:60:66:16:22:2a:b4:
73:38:29:89:dc:eb:41:13:98:85:fa:5f:d7:6e:1c:d9:99:b3:
73:ee:91:b4:53:68:f5:96:1f:b2:f2:06:76:b9:4a:8c:4b:f2:
dd:11:cd:7b:54:d9:88:28:c2:95:53:4a:04:69:7d:72:2b:c7:
22:1b:dc:4d:a6:c6:bd:fd:ce:25:2a:c2:aa:42:19:d9:d3:57:
a8:37:c2:03:8a:66:2c:08:9a:3d:54:2c:ef:3b:0f:a5:9b:4b:
a7:68:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:39 2025 by rpki-client