Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: yy3VM46KNAjRf+GXcZs6gTF2n52M5kIhrXRmaQ/7rjA=
Subject key identifier: 65:74:67:0C:85:8E:45:A0:27:B6:23:EA:F8:0A:81:49:55:5B:56:BB
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 0198D4A7B72280DBE282D97A9E7E86896880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0DAF
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: QxFgw0MxNAiIMV981+QyqzF0BSGNr9lyKhCqgoDwUu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b7:22:80:db:e2:82:d9:7a:9e:7e:86:89:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=6574670c858e45a027b623eaf80a8149555b56bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:27:f6:76:43:e0:b8:2b:37:25:10:a9:b2:
59:06:ff:7e:e2:b3:9a:60:f4:05:b5:3b:4d:f7:17:
03:f0:02:2a:b1:08:10:a1:27:8b:50:d9:a0:d3:da:
5e:9e:d3:4c:ec:ac:c1:95:df:03:0b:c5:6a:18:7f:
31:32:79:81:b6:a0:6b:f2:96:9b:97:80:72:c5:bc:
3d:af:84:5d:e5:eb:95:84:ff:ac:0c:81:ff:25:52:
d0:cd:9b:21:2f:6d:68:bc:0a:fe:ed:9c:21:6e:63:
be:47:4d:dd:3d:bf:e1:f2:07:1e:97:c0:64:83:d0:
e2:71:d6:3f:1a:0b:e8:e5:b1:eb:d9:98:e3:db:4b:
b5:2c:e1:85:5a:bd:c1:29:31:aa:b4:63:c5:f8:a2:
af:79:b5:f7:43:4e:e1:18:a6:01:c2:0a:53:45:36:
92:8e:6f:e8:7d:13:fc:16:45:e9:11:6f:dc:c6:94:
58:2b:a8:f1:98:c1:c7:c1:9a:69:05:b4:b7:ff:e6:
b7:85:3f:01:52:8b:86:cf:19:aa:d2:ce:91:90:27:
e7:a8:27:4a:79:f4:cf:b2:d1:56:b1:c9:dd:5d:d7:
ff:26:a4:d2:44:0b:00:78:88:ea:c9:53:02:97:d3:
a2:48:c6:b6:50:b1:fc:28:d5:6a:a7:24:ce:63:35:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:67:0C:85:8E:45:A0:27:B6:23:EA:F8:0A:81:49:55:5B:56:BB
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:37:11:41:05:69:05:89:44:b1:3e:75:f4:11:df:2c:88:
d0:c7:f8:2a:c0:e3:eb:a0:56:35:25:cd:a5:f4:42:4f:81:27:
66:9e:b0:7f:f1:7f:43:75:90:68:0b:e9:51:74:26:17:8e:b4:
3d:d0:ad:0f:83:36:7e:64:8c:4e:93:5d:6f:67:17:5d:ee:63:
94:06:0d:0c:d5:e7:73:d8:29:fe:5a:52:51:63:89:45:05:52:
7d:55:20:6c:e0:e4:14:89:89:f1:f3:13:42:4c:57:2e:9a:36:
34:d0:b4:44:36:14:6f:e1:bd:31:97:c2:48:2e:95:53:35:4c:
a3:59:bc:93:71:23:6e:c5:83:8a:e3:db:9c:95:c6:f7:30:e1:
73:21:42:19:e5:54:33:11:8e:5c:6d:59:0d:2a:4b:a7:c3:be:
77:3a:d7:a6:ed:0c:56:0c:50:86:85:3b:90:7c:3f:ab:33:17:
2d:27:4e:ba:35:29:0d:a4:a6:96:53:6d:65:55:a3:55:2b:4a:
01:b7:92:d1:b7:a5:8d:f3:4a:26:77:e5:aa:65:0f:d0:94:0e:
6d:ce:35:37:2a:62:66:b9:a3:a2:4a:7c:0a:e8:59:2b:a4:06:
fb:06:b9:76:f8:1f:94:b2:4c:06:74:f5:f4:e7:d8:32:60:47:
e6:96:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:04 2025 by rpki-client