Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: cji9YBxWlmXsHj6N7IRU+HtaUkMDJ+mwu59Quopi/2k=
Subject key identifier: 45:83:14:09:4F:AF:16:3B:27:C9:F0:26:F3:E9:C0:EE:DD:6C:77:ED
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 0198D4742F69EADFB11D639C24277F00275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:00 +0000
Manifest this update: Sat 23 Aug 2025 01:04:00 +0000
Manifest next update: Sun 24 Aug 2025 01:04:00 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: 46KonMl5FfRfTmrVI24ZGQEzsnCpmqpaIqxosTB6SEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2f:69:ea:df:b1:1d:63:9c:24:27:7f:00:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Aug 23 01:04:00 2025 GMT
Not After : Aug 24 01:04:00 2025 GMT
Subject: CN=458314094faf163b27c9f026f3e9c0eedd6c77ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:5f:8b:ea:dd:14:22:78:77:ee:62:f1:63:
b5:57:c6:6d:3b:7d:1e:f1:f4:f7:4d:3d:cb:f1:a2:
89:84:d3:d5:fa:08:fa:cc:2d:66:f2:09:65:03:1e:
75:7c:8e:81:69:04:2c:25:a2:8d:ab:4b:33:e8:66:
2b:36:d4:38:41:91:68:58:70:6d:ed:69:74:c1:1b:
10:92:35:92:82:2b:25:6b:75:d2:71:07:5a:80:02:
bf:15:0c:11:31:88:ff:b7:03:55:13:a2:d8:9c:95:
f7:e5:83:1b:8c:38:16:f3:6a:22:6a:0e:35:9e:56:
1b:c5:f8:2d:af:c7:c2:20:ba:27:3b:25:b2:c0:cf:
44:48:1a:d9:ef:b1:47:4f:4e:fb:a3:4e:25:da:17:
a1:f7:7e:38:01:49:a0:8f:72:a9:15:93:f9:6b:f6:
f2:d9:f0:78:bf:e2:07:08:12:47:ee:16:a0:46:37:
34:76:dc:6b:42:d9:d4:43:de:e7:4e:ab:7b:35:89:
a8:0c:45:51:de:8c:23:6b:99:41:8c:9c:06:54:e7:
0d:b0:7b:4e:ac:01:81:9f:6b:0a:c1:d3:a5:e3:8a:
bf:d9:dd:c0:28:ef:64:b3:90:db:81:3a:b0:11:38:
ed:57:23:b9:60:83:e9:6c:82:e9:b8:f2:66:07:87:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:14:09:4F:AF:16:3B:27:C9:F0:26:F3:E9:C0:EE:DD:6C:77:ED
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:10:36:ab:b7:4e:f5:54:4a:0c:ba:ae:d9:bd:d0:8b:c7:
7e:25:ae:53:93:06:74:fa:26:9f:ad:e9:f8:81:da:7e:f5:2a:
ef:32:ee:8e:a8:5f:42:12:66:e7:8e:9c:a5:d9:b2:3b:9f:fa:
f2:a5:d3:55:62:a8:d2:39:ce:be:06:ed:07:2e:74:51:8a:31:
cc:b5:64:cf:e7:79:bb:73:60:77:17:e2:98:a4:f1:34:12:63:
1a:68:b5:4e:6e:c2:71:bd:ba:ec:74:f8:7d:13:40:7c:93:f7:
47:79:93:ba:59:e4:fd:43:02:20:a4:75:ee:99:15:3b:b0:61:
25:53:21:06:b0:a0:47:f3:28:35:86:26:b4:48:4c:54:a6:4f:
ed:34:e0:58:56:10:56:c8:10:c1:60:38:2c:24:7a:a7:c5:85:
05:b4:52:a6:79:61:b9:b5:f0:a8:7c:ef:f1:0f:d7:46:53:9d:
2e:f8:65:24:66:f1:fb:74:6f:77:05:69:1b:3b:ad:78:bf:25:
3e:a1:b5:fc:c7:73:5b:db:d2:36:24:44:4b:b6:c6:d7:53:dd:
a8:a9:15:4c:ab:6f:52:7d:97:d5:78:8f:e0:af:f7:1a:f6:0a:
bf:c3:f1:bc:9f:10:2b:0a:b1:f8:5d:fc:2e:d1:ca:cd:a0:82:
c2:55:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:48 2025 by rpki-client