
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: OfAwXS9dfR8P1XvcwmcHlPZtryg4yIO64xQ7OFl7LqE=
Subject key identifier: 87:38:13:68:DA:01:23:F3:BC:A7:33:E0:ED:2D:D3:10:87:6C:E6:B5
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 0198D4737C3BE24C3B7CE4E77AD32C010DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 01EB
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: kXw7VZIsCK+3L93rB+tLy9nEah60H9Q1k95Z8gLTS1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7c:3b:e2:4c:3b:7c:e4:e7:7a:d3:2c:01:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=87381368da0123f3bca733e0ed2dd310876ce6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:f8:01:5c:54:1b:c6:43:47:a6:f1:c8:bd:
85:21:12:48:a7:ff:a8:97:06:94:68:2f:70:60:77:
d0:73:c2:67:a6:12:eb:79:d1:37:ee:f1:b0:1f:a4:
2e:7a:de:29:19:b3:bc:12:9a:05:97:de:dc:43:1c:
b6:be:22:7f:8b:20:23:70:5f:04:c9:e8:3f:13:c5:
e2:b7:fe:92:ea:bf:93:c9:dd:c2:0a:0b:fe:c9:b8:
b8:69:88:b6:61:33:79:93:96:e1:86:dd:f3:c1:41:
16:2d:55:fd:9a:66:0c:aa:81:04:76:80:91:1d:b0:
10:ea:8b:df:b9:82:71:1b:d5:1e:7b:fd:33:e2:84:
99:38:19:bf:cf:d5:00:ce:dc:79:fc:b5:06:f1:66:
ab:2a:f9:14:9d:df:fa:f2:b4:bf:ec:ca:4d:9e:56:
72:38:43:d9:16:8d:41:97:d8:31:2b:38:70:2a:82:
74:5b:87:ea:13:39:4d:1e:30:d1:44:48:55:a6:6f:
d0:a0:84:0a:c3:71:ca:19:9b:de:b9:b8:42:78:60:
6f:aa:0a:eb:8f:9e:70:9a:a7:5a:fd:64:56:be:52:
df:89:ce:8a:5a:5a:56:b7:85:e3:be:b3:ff:56:fa:
94:e9:37:6b:6e:eb:b8:84:ad:75:d8:a3:f8:05:5a:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:13:68:DA:01:23:F3:BC:A7:33:E0:ED:2D:D3:10:87:6C:E6:B5
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:64:d0:8a:35:cd:c3:35:42:4a:92:f3:95:9e:fd:12:63:
3d:b6:44:9f:03:e5:62:02:92:06:93:dd:50:56:bc:93:8b:2c:
08:85:fe:c0:2f:62:aa:7a:d0:52:79:c3:80:ff:97:46:89:8a:
14:07:68:b2:85:c8:c6:08:d2:9b:79:61:66:8c:36:e0:bf:97:
fc:0f:89:69:fc:ef:c1:d5:4f:6c:ca:a0:fd:36:52:0a:40:d9:
4d:da:1b:be:6f:ea:a0:03:4d:3f:1c:8e:6f:b3:3a:91:09:de:
aa:a4:5b:0f:3b:52:66:33:9b:ac:0f:19:5c:94:3c:b9:25:bc:
f5:42:61:a4:2b:4a:ad:da:d5:79:cf:93:96:4e:1b:98:26:58:
c2:f6:a8:2f:62:74:b2:6d:3b:12:bc:d5:91:f1:bc:ab:54:35:
e3:62:0e:77:0e:75:fe:6b:2b:d1:b3:84:c2:d8:65:2f:0b:5d:
7d:b9:4b:ab:6d:65:e9:01:e1:b0:fb:1a:4b:c4:f6:c5:3d:a7:
81:e2:cf:e6:40:69:4c:4e:d6:d0:a7:d1:ad:48:4b:68:98:f2:
ea:ad:3f:1a:6f:ae:fc:65:08:1b:5b:ff:55:28:1b:f3:a6:07:
69:68:73:f3:3f:c7:a5:7b:ea:7a:35:b5:11:08:81:d8:6e:2f:
a3:9d:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:11 2025 by rpki-client