Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: MefsbyC7tO7W0cGHmf2IecrSJ6W+HpkVjrTS/cRSqFk=
Subject key identifier: 1A:06:D2:A8:48:12:16:33:F1:62:6C:5C:DB:F7:EE:7A:05:12:10:99
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 0198D5F1AA786C08617B83C7F24EB24E2012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1114
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: HSj1JzCC8UtJYpy20mbpBTsRbEvmtkKI6dkQzyCg5ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:aa:78:6c:08:61:7b:83:c7:f2:4e:b2:4e:20:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=1a06d2a848121633f1626c5cdbf7ee7a05121099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:65:c1:82:64:da:a2:2c:95:d5:6e:f9:03:
76:b6:72:97:3f:8e:10:73:1a:5e:80:d4:78:69:1f:
25:b2:e1:11:1b:c0:3a:b5:5e:60:f6:1c:46:e6:1f:
ca:ad:6b:74:a4:4b:b3:4b:8b:9c:89:17:5a:99:cd:
df:f4:08:67:81:99:e4:07:16:72:96:e7:89:4b:55:
82:99:7f:f3:b6:f4:4a:6c:18:03:6b:40:01:4d:ae:
7e:b4:37:b0:46:ca:ef:08:30:ef:e0:63:3d:8b:5e:
9f:6d:ec:5d:a0:23:d1:72:42:9a:d2:e7:d3:ca:44:
2f:2e:4b:b7:7c:22:5a:eb:69:6b:81:bd:63:88:3b:
b7:eb:b1:9f:69:70:b3:65:3e:62:ae:be:35:81:ca:
fd:2b:cc:2b:a7:de:bd:75:3d:08:12:33:06:7a:9c:
59:2b:f6:b4:6b:74:e7:4a:20:5f:a7:ae:93:25:fa:
c7:54:27:a5:c4:13:b2:41:a2:04:1f:46:b8:93:9f:
a7:20:b6:62:ed:30:6d:73:91:3e:6e:7f:bf:73:f4:
87:67:98:e3:01:07:df:b5:92:1b:92:68:72:e1:3d:
be:9b:6d:97:47:03:ca:21:cb:25:18:d0:79:7c:f9:
fa:8a:39:d8:08:32:bd:18:0a:84:2a:1a:f2:a2:fd:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:D2:A8:48:12:16:33:F1:62:6C:5C:DB:F7:EE:7A:05:12:10:99
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c9:49:56:8c:98:81:a4:b8:69:54:40:a9:bd:f6:f8:c1:ca:
bb:46:e3:73:f6:a6:24:e3:4c:11:79:09:39:c1:85:8e:ae:7f:
01:5d:97:55:79:bd:0e:07:28:46:1a:73:4f:7b:1f:26:7f:be:
4e:83:2d:f5:69:da:81:88:b0:4f:28:76:10:57:97:25:cd:8d:
13:78:1e:29:40:a6:84:46:87:3f:31:75:b7:dc:82:9f:97:b8:
8f:01:f1:56:98:42:3d:8a:e0:99:c8:c4:5a:68:27:27:54:2e:
d8:a8:2e:25:58:80:dc:73:fc:c6:f4:52:d8:f4:aa:ce:f0:f4:
0e:99:f0:b2:03:a3:fa:e5:e0:c7:dd:1f:36:02:69:52:10:86:
e5:6c:63:ad:c1:cc:e7:9c:aa:e4:e1:53:ef:8e:44:f1:47:36:
88:cc:19:3e:a7:42:b8:5c:31:04:20:13:03:27:a1:82:e5:d2:
6a:e4:35:40:10:d3:6d:f4:f0:74:a1:97:b9:10:14:b9:a2:b4:
da:d4:8a:45:d0:12:3e:6f:54:5b:c4:23:0c:24:73:bf:fb:1b:
ce:31:87:e2:7d:6f:40:78:ae:54:91:ff:48:5c:b7:67:cb:a8:
fb:a6:78:f9:11:00:0b:35:f4:f4:1a:6a:90:2f:22:b5:ab:21:
d0:d5:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:55 2025 by rpki-client