Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: tpOeLUJdlM3oi3N6du1N2YynK69XhIqx20bArp8V1uM=
Subject key identifier: 95:86:19:5A:EC:72:57:54:8D:03:32:0A:61:FA:74:FE:71:B1:81:3A
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 0198D4A8037C972FC444E8AEB3CE37DEE293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 1513
Signing time: Sat 23 Aug 2025 02:00:37 +0000
Manifest this update: Sat 23 Aug 2025 02:00:37 +0000
Manifest next update: Sun 24 Aug 2025 02:00:37 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: f+WhMgsqKL3q+qeTJFY6NU4VK3KZ3hDrP3TnSkfjSqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:03:7c:97:2f:c4:44:e8:ae:b3:ce:37:de:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Aug 23 02:00:37 2025 GMT
Not After : Aug 24 02:00:37 2025 GMT
Subject: CN=9586195aec7257548d03320a61fa74fe71b1813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:9f:cb:29:55:56:b4:e3:01:54:27:6d:2d:
42:90:c1:16:42:77:61:56:cf:eb:41:c8:59:79:76:
62:6c:85:73:34:62:87:6e:87:a1:3c:ae:8a:a3:69:
c4:ab:93:09:2d:c7:c2:84:0f:40:b7:f1:26:94:8f:
f1:e9:ff:95:af:dc:af:d6:9f:d9:ff:4b:5f:b7:f8:
96:09:d7:12:c5:30:c3:a9:04:73:28:73:fe:bf:0c:
df:29:d2:05:41:26:7d:70:ac:b2:3d:2e:68:a7:d6:
72:c1:04:46:9e:4c:a8:43:a7:9c:54:5e:c6:d9:c6:
4f:fe:ab:b6:c8:6b:df:e9:cf:44:d2:29:13:9f:77:
20:7b:50:67:79:cb:82:98:09:aa:18:cf:f1:e5:ee:
4a:9a:19:3a:23:a3:36:07:8f:d8:c3:01:e9:19:03:
5f:aa:4b:8c:f7:aa:ef:a6:59:1d:7c:d2:c5:d9:55:
be:71:62:0d:c0:6b:f6:cb:e4:ee:78:86:fd:26:f7:
fc:03:d3:87:e1:88:e0:b3:48:b8:5c:a3:a1:20:b5:
42:45:3c:23:41:44:8c:b4:51:02:0e:6c:dd:55:2b:
71:c0:35:af:92:dc:94:1a:66:1a:ce:3a:e5:ab:8c:
13:f6:ee:1e:af:d1:64:34:3c:71:42:0d:a8:d4:cb:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:19:5A:EC:72:57:54:8D:03:32:0A:61:FA:74:FE:71:B1:81:3A
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:6a:29:a1:10:67:22:60:a1:db:31:08:5b:c8:94:e9:e3:
05:eb:2c:e8:9a:d5:31:a6:16:8c:b8:37:1a:51:0a:b0:73:84:
43:b4:af:72:30:d1:dc:84:40:12:46:d8:15:1d:8f:5d:51:b8:
4a:38:e4:41:27:1b:e7:5f:87:d2:c2:e4:e6:97:a2:53:70:2e:
c5:82:68:b2:cd:d3:bf:3d:57:82:ce:0a:82:fb:6e:a5:5c:d6:
f3:65:df:8f:d6:bf:20:90:51:6b:40:00:24:06:bd:a0:16:87:
d6:03:b5:e0:08:44:14:2e:3c:20:dd:0a:44:38:11:7f:94:1b:
15:7c:48:fd:67:6f:bf:fc:73:b6:b0:15:22:73:9c:26:9d:08:
1a:5b:5d:31:4d:67:d3:31:65:31:5f:b0:54:62:54:ff:fc:61:
d5:3d:08:c1:af:43:c9:d4:db:ef:de:e3:e2:cc:d9:7d:27:3e:
a3:4f:10:ec:81:e9:96:5d:08:27:a2:8f:a3:9b:e2:b9:a4:b4:
c6:62:da:e3:c1:eb:15:ad:14:0f:c3:f2:a5:a7:1d:48:4d:12:
82:ee:fa:f0:69:d4:fd:50:75:45:65:cf:ef:fd:00:9a:0e:7f:
32:cd:95:2e:e9:82:f9:ea:42:9c:3e:40:03:a7:b5:d2:35:ca:
40:fc:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client