
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: Bu3Cte6S4cpQ34b3m7vRvcVopm3BvnIvU+m5y056ZRg=
Subject key identifier: CB:0F:AE:25:6D:E6:58:D1:C1:4A:EB:6D:FD:79:C5:B0:05:CD:01:50
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 0198D660039486B5435751A4F14C062F394F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: lFSqWHorgacrSr55q+uC64nQyY3cL6uqsfyYE0IbXfQ=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:03:94:86:b5:43:57:51:a4:f1:4c:06:2f:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=cb0fae256de658d1c14aeb6dfd79c5b005cd0150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:56:2a:70:f0:fe:f2:23:d9:72:d1:a9:ca:
60:1a:17:f3:60:cf:7c:e8:ea:fc:1b:50:bd:6d:e9:
d6:97:2f:84:af:c7:a3:38:a9:c2:81:a0:f2:e1:19:
65:bb:78:d0:56:e2:fb:fd:bc:ea:dd:fe:5d:08:04:
68:7e:c8:4b:42:ab:94:87:5f:22:26:0a:62:cb:d4:
2d:6c:6b:eb:83:66:fa:b8:6d:3a:50:4a:20:59:c6:
12:62:71:04:36:eb:0d:2e:8f:5b:82:e6:47:e8:ba:
a8:20:25:d6:00:2d:b7:a1:a4:46:89:81:e6:68:3e:
86:c3:95:f8:55:16:f7:0a:b5:f2:70:42:75:db:eb:
16:af:8b:7b:62:a2:e2:95:a2:f0:ab:88:e6:c5:30:
ed:e0:cc:84:52:7a:c4:1f:46:aa:fd:b7:1a:da:11:
97:70:65:52:d4:f7:0d:20:c3:51:b0:f8:9d:24:c7:
29:3f:a4:64:bc:85:38:89:5b:42:4d:a8:cd:bd:46:
fa:a8:7d:b2:cc:75:c5:e8:72:01:50:5b:37:3d:2a:
90:08:70:06:4e:3f:a9:d2:8e:aa:a5:d3:26:17:94:
d3:35:b6:e5:3c:e7:fb:82:0b:78:10:15:24:af:8f:
66:b1:a1:03:0c:a6:2c:ef:d4:f9:1f:b5:28:a9:36:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:AE:25:6D:E6:58:D1:C1:4A:EB:6D:FD:79:C5:B0:05:CD:01:50
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:23:d0:9f:71:22:e7:54:87:e1:ae:76:43:53:5f:bc:20:
c4:8d:69:a2:f3:77:33:a2:5a:7b:e5:56:ac:44:b9:10:b1:a8:
07:f3:65:dc:ed:ca:a2:f8:a4:7a:29:8d:95:00:b1:c9:ef:7d:
ab:93:3e:ba:1c:45:10:0c:18:d3:d3:ff:b1:7e:f8:f5:7e:c3:
9b:2b:b0:47:cd:2d:a6:61:b2:3e:98:18:44:bf:20:10:80:13:
2d:f3:60:32:8b:51:b3:09:3a:14:62:f5:b8:b8:ee:0a:59:ea:
22:e3:df:5f:f6:b2:70:a4:72:8e:e1:0b:46:ce:f7:f2:50:8b:
58:54:6a:87:9b:73:33:9d:14:fd:67:5f:f3:87:c7:b3:9b:8c:
7f:f4:49:65:53:8e:34:78:75:a1:45:7a:1f:2b:fd:a2:8e:40:
78:d4:c9:a6:7f:47:01:a1:ae:5c:a6:86:14:68:1d:6b:1c:db:
24:a0:fe:b5:03:9c:eb:ff:c8:71:d6:a8:2d:66:85:11:c3:e9:
fb:25:a1:84:a3:aa:a4:fe:6d:47:50:33:2f:11:d0:5d:1a:6b:
c9:2d:9f:e0:3f:11:08:c9:8d:eb:c9:0e:3e:85:ce:d3:fa:05:
f3:06:51:29:0a:3f:a0:b5:d0:83:cb:c1:a3:12:80:6d:12:f8:
6b:d5:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:48 2025 by rpki-client