Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: YU/DDeQohtyyKaXez8wM4swiNnTm/J7n5f9N4xHCjlE=
Subject key identifier: 66:07:DE:A3:C3:1C:10:27:3F:6E:D0:78:B1:34:C1:CC:44:88:C6:6D
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 0198D5BB8CBC7401DB00710DFE3906D42D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 113D
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: vcWpB7tX79TbDG7bTauWYfWHgYKw6azOIBFSqGS5HxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8c:bc:74:01:db:00:71:0d:fe:39:06:d4:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=6607dea3c31c10273f6ed078b134c1cc4488c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:d5:55:de:2a:7b:24:b3:b0:a9:ee:e0:0b:
b6:79:c6:90:f4:3a:89:e9:3b:38:58:b7:23:f9:f0:
a1:97:86:87:94:67:9f:93:a2:20:1c:85:e9:40:06:
cb:84:48:f7:2c:fc:08:d5:a2:60:fb:fb:bd:db:c5:
5b:ab:ef:61:5f:3f:63:f0:91:a7:6c:f8:26:33:13:
a0:c8:b7:86:73:ac:ce:76:78:a5:6b:ce:8c:7a:3d:
ef:f9:77:e0:f8:37:fd:93:1f:2f:ac:79:a8:b7:7f:
95:ed:f8:34:66:2a:59:53:d8:08:03:a0:e3:3a:6f:
26:3d:0d:5f:97:b9:fa:e2:1f:d0:45:b9:46:05:39:
04:7d:e9:c3:51:14:61:08:41:45:1b:91:70:57:40:
95:e6:b1:23:a7:ab:b3:88:77:14:d0:23:02:f1:e1:
d2:3d:70:aa:b7:2c:cb:c4:f2:15:0a:d8:9b:27:dc:
e7:6c:50:16:3f:e4:cc:76:89:d4:7b:fd:4d:93:b8:
13:13:aa:99:22:3a:51:4b:94:cf:9b:1c:39:27:16:
c4:32:b9:cb:85:95:74:fb:90:8b:98:1c:e6:22:15:
d1:6f:52:88:2e:8b:b5:b2:41:d0:7a:da:62:59:81:
70:a7:33:d2:6d:a3:bd:3c:c9:3f:fc:55:a3:10:ca:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:DE:A3:C3:1C:10:27:3F:6E:D0:78:B1:34:C1:CC:44:88:C6:6D
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:5b:74:15:5f:f4:e1:b1:88:2b:56:39:3f:86:fe:59:b0:
91:82:15:28:18:18:2b:c0:1d:fd:e3:4c:f6:90:d8:cf:9c:b7:
57:c0:26:65:40:73:a0:d6:29:3a:d9:53:57:58:6b:de:cf:1c:
d9:a9:45:ba:83:41:0b:07:67:f7:87:8f:fa:c1:d7:af:f9:cb:
bc:16:15:bf:b9:a9:0a:9f:f2:fc:ce:50:dd:50:d4:9d:e2:d8:
2c:92:5f:f6:71:c4:1c:2e:6f:35:99:c3:cc:8b:a1:56:61:2c:
a0:ea:41:76:68:9e:7d:63:4e:e8:6f:a0:66:43:6c:f4:5f:58:
c0:47:e1:08:93:56:4d:b6:0e:4c:73:9a:8a:78:4d:fc:f5:65:
71:0d:73:06:61:ac:57:8b:48:c1:07:7e:8c:11:3c:3f:3f:26:
c4:80:0a:fb:84:4c:1c:61:1c:28:4d:9b:ef:ec:bb:31:c7:cc:
f4:d4:c9:49:cb:53:72:8c:4e:ca:2e:23:15:fb:26:99:9c:68:
6b:9e:64:7a:91:73:7d:5c:db:7e:8e:43:64:47:1a:28:b0:83:
69:76:5f:50:de:ea:cc:1e:64:74:c5:69:7e:19:0d:81:18:c4:
8e:19:7d:cd:ba:5a:33:19:08:95:13:db:a6:a7:15:a6:05:1d:
34:49:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:16 2025 by rpki-client