Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File: UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier: s+b5mNZ4zdku7keQKR6QSc0m0RqC9VWJhk06dahKY1A=
Subject key identifier: A6:1A:9A:20:3E:90:38:22:92:1B:AC:4E:AD:64:10:0D:A1:A4:E3:0F
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer: /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial: 0198D6CD2DE8596ADD0932BAA159275D9BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number: 0D2D
Signing time: Sat 23 Aug 2025 12:00:27 +0000
Manifest this update: Sat 23 Aug 2025 12:00:27 +0000
Manifest next update: Sun 24 Aug 2025 12:00:27 +0000
Files and hashes: 1: 1YvZ3HmGUBflg7Tyw2cx-VayPcg.roa (hash: 0znicQ82KwpbqBMTtCi29xQu48z8jC+t2SYrc2cMr7Y=)
2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: biIa9bdW777OG9sZXaGOvgjJJhL3xn0h/G9e/eATTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:2d:e8:59:6a:dd:09:32:ba:a1:59:27:5d:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
Validity
Not Before: Aug 23 12:00:27 2025 GMT
Not After : Aug 24 12:00:27 2025 GMT
Subject: CN=a61a9a203e903822921bac4ead64100da1a4e30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:43:49:85:07:bd:b3:9a:02:2e:21:bd:94:
ba:a7:e7:17:8f:10:58:68:43:60:1c:d1:67:0e:89:
1e:7c:71:a2:b8:e6:d6:f0:c0:b2:e2:85:8b:8a:86:
58:76:a4:28:80:13:dd:e5:73:15:bc:7a:61:a7:59:
90:72:94:2f:6e:72:f7:d3:01:a9:d9:46:36:13:9b:
fc:83:d2:b5:3f:d7:d2:ce:b1:97:9c:7c:85:a2:6c:
db:2e:92:18:8a:b4:82:24:78:20:71:3e:5e:93:cb:
67:75:8a:bb:84:9a:47:3b:ae:ac:c5:c1:ac:c8:ba:
14:ac:9b:f7:66:b9:3e:6c:89:ce:eb:73:27:d8:c4:
4b:7e:e7:af:93:09:67:ef:6c:64:66:dc:a5:27:d2:
95:a3:3c:5a:ae:02:ee:09:e5:d0:bb:4a:a1:10:09:
c9:9c:b0:d0:ce:5c:1d:a4:75:30:24:3f:c5:7b:92:
b0:4c:0a:2b:bf:85:8f:7b:c5:e8:e2:02:fc:f1:f0:
88:eb:f5:e4:b5:05:4f:fd:f2:0b:cc:16:cd:1d:c0:
84:98:49:24:93:16:c9:28:95:c9:a3:e3:b7:34:27:
16:4f:fc:f3:45:f5:87:71:cc:3f:40:ce:f8:26:8e:
b1:46:9c:bd:17:d6:90:4f:3b:34:bd:2d:08:73:ff:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:9A:20:3E:90:38:22:92:1B:AC:4E:AD:64:10:0D:A1:A4:E3:0F
X509v3 Authority Key Identifier:
keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d7:a3:95:5a:f7:dc:a7:e9:eb:d4:37:df:e5:6d:da:6e:43:
89:ff:0f:8d:9a:b5:df:53:45:c6:c5:87:80:e7:7d:0d:4a:ab:
52:3c:7d:35:1d:52:10:04:ad:5c:46:fd:60:e3:8f:b5:f9:69:
55:42:88:62:e9:26:f8:7d:18:87:ca:b2:ba:80:28:34:8d:54:
0a:8d:90:ed:c6:5a:14:b3:0a:e7:4e:bc:47:5c:7c:0a:b8:a0:
cc:1f:2e:c7:12:e0:be:30:de:75:01:0e:b5:6f:4f:a8:28:fb:
28:28:c5:8c:aa:a8:12:f3:d9:9b:10:79:b6:3d:14:e4:c0:7f:
4e:0e:f3:94:95:7f:14:ca:86:34:13:d5:d3:0b:52:50:42:1c:
ee:3d:df:1c:08:e0:50:82:46:18:1f:9c:65:16:4d:c2:df:12:
ac:75:52:37:a8:60:27:0f:1c:98:26:db:bf:8e:eb:83:23:f7:
40:95:ff:6d:65:d3:53:40:16:36:56:93:e1:33:68:65:3d:ff:
24:80:ad:d6:38:94:7a:53:92:26:a3:d3:6c:5e:0f:2f:23:49:
e5:2b:4a:9a:ed:c9:1a:08:a0:e8:9e:0f:b9:61:1e:ec:94:ad:
fe:fc:35:8d:39:97:e5:58:ac:f3:66:ee:4e:c1:92:12:d4:bd:
67:ef:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:03 2025 by rpki-client