Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: zN4NmeWA9NSVxddkEANIIVco4Yw5LSDdx25mryU3SBc=
Subject key identifier: C6:2C:03:F0:7F:7D:BA:4E:6A:E1:46:ED:F6:22:CB:AF:C0:5B:8A:9E
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 0198D5F196C7EE778EBADE6F5E1EA7161FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0490
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: ibHjxGZFx8uUuwuZwp+ZR4mW/emf/VKt2b9ZiQdEpQw=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:96:c7:ee:77:8e:ba:de:6f:5e:1e:a7:16:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=c62c03f07f7dba4e6ae146edf622cbafc05b8a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:a1:64:7b:ec:a4:64:ae:6f:46:5e:bd:44:
4d:be:ab:42:84:08:3d:d3:f2:85:92:ae:2a:ea:1a:
c6:25:56:a1:b8:6b:71:43:77:c9:29:26:ad:77:43:
2f:88:0c:bc:6d:d7:10:da:80:cf:46:94:33:58:ab:
6a:e8:bd:f1:45:fc:83:4b:25:ac:d4:64:37:ff:04:
5e:6e:cd:08:e2:59:96:0b:c0:d8:e7:d7:1e:22:8d:
40:68:4c:03:66:e0:f3:0d:0e:2c:e9:51:0a:ba:56:
36:6a:21:51:e7:f7:98:de:1b:f1:51:e3:3c:3b:ca:
3c:4a:d3:01:ff:a3:39:89:c6:37:1c:9d:e4:9b:46:
aa:fb:db:44:59:63:8a:8d:f4:27:ad:16:33:a0:a3:
36:f1:a4:0c:1d:2b:df:a8:85:8f:98:3f:c8:0c:54:
dc:69:75:3d:75:61:ce:54:ca:8a:55:47:28:00:96:
02:77:ae:0c:c3:42:10:01:3d:08:05:c8:47:b2:37:
e2:55:82:17:87:b1:88:f5:f7:e2:f9:b9:a3:51:f5:
87:3c:53:50:c2:6f:5e:17:ef:1c:62:cd:02:36:87:
2c:9d:b5:06:f9:98:21:58:41:a6:93:ac:20:d3:2f:
8f:27:90:28:9e:ce:5b:c3:5e:2d:80:5b:11:07:09:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:03:F0:7F:7D:BA:4E:6A:E1:46:ED:F6:22:CB:AF:C0:5B:8A:9E
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f9:ec:ef:67:98:5a:e0:9b:0b:21:df:22:4e:1a:87:f1:3b:
48:1f:11:10:37:e0:53:97:aa:3d:37:89:74:2d:a3:d0:76:7e:
ce:eb:37:d9:e9:81:a2:3f:18:eb:be:23:fc:6c:f2:86:5d:2f:
45:32:e1:01:5a:d2:24:97:50:f2:84:1d:c6:e6:d8:84:78:a3:
96:28:c8:e2:4d:eb:4e:06:d2:bb:45:53:c6:29:bc:ea:ae:ff:
39:2b:f9:36:3d:7b:82:b9:e6:70:42:a7:17:c7:75:49:46:8a:
66:34:91:d2:9a:f0:ff:b1:ee:61:48:f6:69:08:38:0b:4f:8c:
41:f1:89:a4:4f:56:c4:56:e7:fc:25:de:75:6a:4f:31:94:a2:
5a:c7:17:3d:dd:d2:47:12:52:e1:bc:ca:9e:79:3f:02:45:86:
7b:7c:c8:32:9b:cb:f9:7a:41:42:9e:29:13:74:a9:2c:39:59:
d9:6b:03:78:ff:a6:a0:38:49:2f:7a:b5:f7:2f:6c:12:cc:e9:
21:f3:04:09:e5:6b:83:1c:b0:67:fa:e9:81:df:c5:ca:57:91:
cf:5c:7e:fd:00:a8:b4:37:53:cf:8b:11:0c:51:22:7c:34:7f:
c8:71:c9:e6:08:af:ac:51:16:c4:35:c5:a1:62:81:a1:43:2f:
fe:89:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:37 2025 by rpki-client