Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier: QqP+kKp+31F/Z7be1NAgPtaY3+h2cPaPLUEp2FvAvWo=
Subject key identifier: 23:83:5A:E1:B2:F7:DE:99:55:45:8E:C3:72:73:C8:D1:38:F2:29:71
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0198D4E092DB34FB7F73FBA1BCB1CD8FCA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: vwxVwqo1jaJEj0mul0zf2eNNSP1IGc7i7d9Z+XPGY7Q=)
3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:92:db:34:fb:7f:73:fb:a1:bc:b1:cd:8f:ca:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=23835ae1b2f7de9955458ec37273c8d138f22971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:e2:a0:e5:d8:57:4c:a9:39:3f:da:96:07:
45:dd:05:e9:15:fa:26:45:9d:ed:92:5b:d1:02:d5:
3b:35:86:71:6c:11:db:35:7c:70:6f:dc:95:4b:ac:
67:77:7d:7a:64:19:d1:12:40:46:9a:8f:aa:ea:07:
18:d8:9e:24:7a:cd:c0:e6:a4:cd:04:83:2e:64:ef:
a9:86:25:0f:73:ac:22:15:cf:74:e6:23:9e:6f:1f:
4a:36:5d:bf:0e:24:f7:0e:fd:f7:f8:b3:c0:02:5d:
1b:3a:b4:06:45:39:49:1f:a0:5e:d3:34:52:7e:20:
8a:85:9c:5d:68:9e:4a:7d:71:2d:41:17:42:fd:8d:
83:ec:91:cb:c2:49:63:ff:92:41:82:06:c2:9c:14:
96:a8:66:16:90:51:28:72:54:e2:ca:b3:53:8e:c0:
be:71:a0:09:64:6b:87:e2:72:ba:67:bd:44:ec:4a:
f9:43:2e:7f:09:db:62:be:8c:54:9b:a0:35:10:3d:
54:ef:bf:cc:dd:9a:c9:76:91:3d:ec:84:20:e6:89:
00:4d:4f:e5:b6:06:d6:89:56:42:4d:58:ad:97:08:
83:86:07:b2:84:5f:9f:a4:b2:b6:e1:88:79:3b:b7:
9a:c7:0c:bb:25:18:a6:04:79:32:5b:4b:1b:95:c8:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:5A:E1:B2:F7:DE:99:55:45:8E:C3:72:73:C8:D1:38:F2:29:71
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:17:89:e9:23:3c:bb:0d:6d:a1:03:a8:cf:35:e7:01:5b:d9:
49:16:d0:99:4c:86:a6:54:86:03:bc:d9:3c:a8:57:d9:09:f6:
51:15:5e:be:cc:20:cf:a1:ef:f3:f8:f7:10:fb:6d:10:25:eb:
3a:f8:a0:58:7b:8c:e6:40:7a:f2:03:6b:74:23:27:99:5f:7b:
0a:11:8c:8b:ed:3c:85:b4:8d:b5:5d:dd:ae:e5:4f:bc:f6:b0:
a4:88:a1:23:ec:81:1a:29:ce:e5:48:59:1b:18:47:77:39:f9:
d2:4b:81:38:9b:d1:e2:cb:e9:27:8a:50:10:51:d5:58:4e:fd:
57:26:53:a2:2d:ca:5a:14:5f:10:24:04:02:78:57:32:de:03:
0b:f1:c3:ec:f6:a2:6d:7a:05:7e:8d:bd:12:eb:92:a1:22:ef:
78:2b:89:85:e7:74:b6:9e:10:24:c6:0b:6e:10:24:8c:9e:cc:
7e:6d:c8:d3:5d:a4:06:7e:af:eb:3e:82:a6:16:a7:bb:82:f8:
36:40:ac:d6:26:a3:76:85:55:3c:bc:51:20:24:9b:cb:32:97:
22:0a:51:99:ea:09:b9:3a:03:9a:64:5d:b0:e7:c1:45:51:fe:
2c:9d:23:c4:1a:25:f1:d8:5c:f9:c1:66:cb:a4:62:ca:c9:43:
0b:c7:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:55 2025 by rpki-client