Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: PA1QCFQx8Q3D2uwMs9i5w+bbruFY8R5MeiKZTNq811I=
Subject key identifier: A2:B4:2B:28:13:D3:45:16:4E:31:93:24:CC:9E:D9:72:43:0E:C3:87
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0198D5BC64C633DD502B618E2536D5F6672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 14FA
Signing time: Sat 23 Aug 2025 07:02:30 +0000
Manifest this update: Sat 23 Aug 2025 07:02:30 +0000
Manifest next update: Sun 24 Aug 2025 07:02:30 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: ZRbB1cFUC81y0ivMydHerO47H2xTPU2GPEEoK8I9EEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:64:c6:33:dd:50:2b:61:8e:25:36:d5:f6:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Aug 23 07:02:30 2025 GMT
Not After : Aug 24 07:02:30 2025 GMT
Subject: CN=a2b42b2813d345164e319324cc9ed972430ec387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:df:2c:ec:d3:51:37:16:0c:7b:ed:3a:1d:
ab:06:9a:e3:ef:a6:ea:79:b3:42:bb:a5:64:3a:65:
d5:51:ac:f4:79:c9:9d:0f:0e:fd:04:55:bf:6f:96:
b8:b5:a5:34:15:0f:da:d3:ca:fb:5b:dc:91:ac:c7:
83:2d:f1:8f:7b:68:a0:1b:7e:5e:64:cb:d0:d3:b4:
8d:15:c1:6e:07:78:78:e9:bf:67:86:2f:a9:e2:94:
6c:c2:10:61:8b:ae:1f:6b:01:82:bb:06:75:52:99:
cb:71:3f:03:21:9d:a0:01:39:ac:b4:d4:e5:8d:e3:
a6:43:fa:64:19:96:c1:38:d8:2e:e8:29:4d:d5:40:
f1:dd:e3:9f:d7:91:53:05:3d:57:cf:8c:c2:49:a6:
ec:47:a3:3d:2b:91:86:01:20:20:61:64:d6:9c:53:
29:38:e3:6e:f3:c6:6e:85:11:f8:27:99:21:0e:b8:
87:53:94:86:21:94:96:3b:f4:b8:df:07:25:f7:7b:
32:dd:d3:d6:99:c3:6f:9f:53:32:15:84:96:e2:22:
06:b9:fb:cb:7c:9c:ff:3c:bc:f0:04:01:46:3f:5d:
b6:fe:bc:73:66:ad:6c:0a:bf:bd:57:cb:02:37:a0:
2f:06:6c:29:41:bf:e1:8c:56:1d:af:32:d0:3b:f9:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:2B:28:13:D3:45:16:4E:31:93:24:CC:9E:D9:72:43:0E:C3:87
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:a9:99:89:3f:63:4e:3d:86:97:0d:b2:4a:85:32:86:d0:
c1:81:fe:71:6d:e5:69:bb:4d:5b:89:52:09:1f:9e:4a:ed:18:
49:4a:24:fb:1f:45:28:b8:d9:1d:ea:30:76:9d:fd:bf:16:b6:
b5:37:6b:4e:f1:79:e4:58:38:44:fa:51:be:eb:2f:92:81:9d:
65:04:a5:42:4b:c3:91:bd:b0:8a:f2:67:62:bc:c9:c6:14:b9:
e8:8b:8a:ff:d1:ac:ca:da:25:cc:cc:39:09:95:23:ee:c2:e5:
68:c3:b7:d5:f2:19:23:68:7a:0c:84:a2:32:ed:5d:14:2b:76:
79:ca:2e:5e:e7:5a:6e:3f:b3:e7:05:81:58:da:34:88:ca:5a:
08:3c:f9:94:bd:e6:91:ab:c9:b6:7f:8a:a6:a1:c0:b1:89:ae:
65:be:36:5f:2c:e3:81:d3:74:2b:cb:ee:b5:98:bd:ee:ee:30:
8e:75:b3:d6:6a:a5:83:44:29:c0:ee:ef:3b:45:eb:89:94:c9:
ad:7e:e6:2c:3d:33:7d:fe:76:d6:38:35:ed:1d:01:ae:0a:9e:
eb:a6:04:b9:29:d6:8b:6d:ce:8b:e7:09:05:5a:20:90:f7:01:
a9:29:29:25:2b:61:9b:75:16:4f:ac:e9:41:40:f9:75:51:36:
04:fc:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:57 2025 by rpki-client