Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
File: uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json)
Hash identifier: gtlie1h90UE2Q9NHY4BkLiQRPTSTvW1Ui7jiuXzfYL4=
Subject key identifier: B5:D9:55:18:36:B8:AA:52:7F:CA:7A:1E:1D:BD:27:77:41:24:42:E2
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial: 0198D4A7CA5A1DE38DE58092BAE78BB645B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
Manifest number: 0A47
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=)
2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=)
3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=)
4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: y2bHAdFYxUaMOmVOqvJkW5y8bnaTZ1W3eEMcF2FFD5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ca:5a:1d:e3:8d:e5:80:92:ba:e7:8b:b6:45:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=b5d9551836b8aa527fca7a1e1dbd2777412442e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:0e:16:4d:94:d4:24:73:87:a7:8f:ec:7f:
eb:49:df:4f:b2:40:20:70:d7:f9:f4:d4:5d:64:3e:
45:51:96:d1:04:36:82:f2:4d:15:7d:94:a3:d2:83:
ac:ef:85:56:38:d1:14:38:ff:60:8d:77:64:ba:90:
38:13:24:2c:d6:31:8a:03:4b:c9:f7:ca:7d:88:d1:
6e:16:b5:dd:69:1b:e2:fa:dc:54:2d:c3:d3:ee:bd:
ee:d2:9a:ca:c5:8d:7b:33:5f:cb:eb:d2:49:be:b5:
26:b3:af:c8:00:cd:6f:2d:35:f5:3c:18:45:e7:99:
56:86:d8:91:59:2b:46:0d:04:e2:b9:68:40:a0:85:
d9:5e:d8:a2:16:87:a4:75:e7:bd:e0:c2:5a:76:77:
79:03:c2:26:97:89:31:75:73:74:c9:33:84:6d:54:
09:1f:bd:c6:4e:01:ae:bd:84:e1:8e:38:bd:de:54:
06:c4:2c:ff:c5:6e:88:37:03:c3:96:b9:fa:d0:a4:
d4:a5:25:1d:fb:58:41:e0:f3:7b:01:6c:af:fa:19:
e4:ac:f2:bd:c9:c3:59:6e:ea:04:42:37:da:30:c1:
3f:74:e1:2c:35:d7:b4:58:f9:8b:4b:3e:8b:d8:5a:
07:fb:e2:71:73:a5:17:7d:e5:73:56:70:7a:1e:1a:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:55:18:36:B8:AA:52:7F:CA:7A:1E:1D:BD:27:77:41:24:42:E2
X509v3 Authority Key Identifier:
keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:75:71:ee:f0:86:1f:7c:81:cb:d9:5e:00:5d:8e:62:1f:c4:
52:86:7e:e2:59:4a:75:1d:78:60:15:f5:90:b2:b5:b7:29:51:
76:d9:bb:66:c5:66:61:01:d5:6a:4a:23:e4:c7:82:ad:01:d0:
f2:0d:43:c4:ee:ef:89:05:3f:34:e7:aa:3d:1f:e4:83:53:cb:
f8:4b:59:c0:22:10:ef:57:55:b5:d6:8e:27:56:b0:fa:55:4c:
be:8e:06:10:74:98:e5:5e:89:19:f8:16:60:9f:cb:98:a4:5f:
5c:81:3f:b4:b4:af:01:16:d5:51:5f:91:84:b7:1c:7d:d1:f4:
a8:e3:ce:c8:7c:24:9c:b7:5d:8c:ab:e6:fe:27:a1:7f:bf:3e:
b2:39:38:f5:8a:14:a1:e7:db:72:f6:7f:41:1e:2f:e6:85:18:
5d:b2:a5:66:bb:2c:f8:f3:e8:1e:65:cc:54:56:1b:c0:b3:e8:
2d:44:c1:94:4d:ee:f9:4b:33:a1:0c:1f:73:8a:34:c8:e1:9e:
1d:b4:d5:97:f3:ef:74:cd:69:84:10:fe:f3:fe:6f:64:0c:a2:
ab:fa:36:25:f2:a7:48:60:94:ee:d6:99:c1:66:63:e3:15:6a:
00:f7:18:79:b8:0b:1f:dd:fd:11:74:c0:37:4f:7a:31:d8:61:
9c:0d:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:36 2025 by rpki-client