Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: yLxEoSZhqANg6ZZgl1Vmc8D/vbNF6UwSjYqbmrVc/sc=
Subject key identifier: D1:F8:95:C9:A3:E0:44:87:EA:E3:50:53:F4:45:AA:1E:83:85:41:8A
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 0198D4E008C147937667A9EF997D710B2C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: 0214
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: sooxlSBjqL3Kthn3Ia7l+ATh3d6apQqqYqnd6KPw+fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:c1:47:93:76:67:a9:ef:99:7d:71:0b:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=d1f895c9a3e04487eae35053f445aa1e8385418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:7f:bf:30:9a:b0:aa:fd:cd:23:6d:d9:6f:
6c:b4:7d:9e:e2:b1:96:8b:f1:25:09:e6:da:39:4b:
c6:42:b9:3a:ed:2d:40:dc:09:fd:8a:a0:05:06:44:
d7:dc:02:18:ff:5a:d3:c2:d1:e8:4d:ee:7b:46:83:
ec:27:15:57:be:96:58:29:c1:8b:ee:40:a3:20:c6:
10:ae:d7:de:6e:b6:1e:92:d6:9c:4a:ab:e4:d9:c4:
83:6f:f5:b0:71:db:84:f0:ca:84:75:4f:d0:74:9e:
8c:40:7a:22:eb:e8:ef:6e:58:44:26:13:db:8c:17:
a2:1c:26:ca:ae:fb:3e:45:57:93:1d:f2:08:20:47:
fd:d7:bc:f0:bd:c3:75:9d:eb:86:de:3e:e2:13:da:
48:a8:3d:83:3a:e3:14:a0:00:87:52:fe:99:f0:a9:
ce:99:5e:0b:72:27:b4:11:79:76:de:76:20:07:6a:
3e:24:1e:96:f4:f3:83:7e:02:41:64:9c:79:97:d9:
8a:3b:a9:72:32:e2:1e:30:b9:c7:80:00:53:15:f9:
3c:63:94:17:a4:12:0d:1c:2f:d0:f8:83:b4:fb:2e:
ba:83:26:35:c4:cf:4c:52:d1:c5:ee:26:1e:59:d0:
c9:d8:96:cd:25:0d:e6:e2:6a:d3:96:fb:91:be:fe:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:95:C9:A3:E0:44:87:EA:E3:50:53:F4:45:AA:1E:83:85:41:8A
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:5f:80:51:52:0d:59:e8:1d:41:9b:f6:3c:a5:1c:2b:b2:
f9:f0:cd:dc:c2:62:64:3e:35:e7:fc:18:d3:5e:8d:da:88:66:
c4:58:30:33:b6:be:f8:10:c2:9f:f7:fe:66:c3:2b:e5:07:7a:
de:78:9a:06:90:2b:b7:0a:65:fc:15:b3:1e:5a:d4:02:23:c3:
23:6d:d7:13:36:e2:40:4a:1b:c8:aa:1b:55:05:72:47:b0:38:
fa:4a:13:67:f3:fa:35:63:12:16:fc:b8:d0:48:54:fc:81:c8:
55:7c:da:af:53:81:cf:40:b5:24:22:71:58:24:0e:30:25:eb:
89:8b:0d:18:51:d4:51:a7:9f:48:7a:e7:89:d6:dc:5f:4e:79:
55:82:d9:81:71:a0:6f:72:7d:d4:5e:cc:da:23:f7:05:5f:4a:
ae:41:cf:21:08:f4:ec:cf:5d:79:d4:83:71:63:69:75:a6:f5:
0d:bc:a4:6e:b5:c1:e8:7a:1f:6a:78:28:34:a9:d2:a5:d1:3c:
42:f8:ee:73:c1:2e:5b:34:fb:d7:14:ce:cf:b8:fa:71:ba:7e:
2c:83:59:aa:34:2b:1f:87:de:98:7b:17:05:43:55:d4:fe:8d:
70:be:71:70:b8:24:5c:ac:03:80:16:02:f2:9c:d3:16:f3:dc:
b2:a6:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:15 2025 by rpki-client