Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: tsPkbR5xklH6cCAca8Dg9aSsG06kRlislWe/xmoM1sk=
Subject key identifier: 9D:FA:FD:FC:4D:B8:29:21:4D:33:C4:48:2C:87:A3:BF:60:F5:B8:84
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 0198D73AF78501ED02BD783B923719F48CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 14:00:22 +0000
Manifest this update: Sat 23 Aug 2025 14:00:22 +0000
Manifest next update: Sun 24 Aug 2025 14:00:22 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: zcFbMd2IagsBEvWpWh25GISbzmlAAVWA3uSYIgj22D0=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f7:85:01:ed:02:bd:78:3b:92:37:19:f4:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Aug 23 14:00:22 2025 GMT
Not After : Aug 24 14:00:22 2025 GMT
Subject: CN=9dfafdfc4db829214d33c4482c87a3bf60f5b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:25:06:54:e1:52:58:22:aa:a8:19:cd:f4:
97:6a:48:22:b7:89:08:36:63:19:bf:95:b2:79:a7:
67:3c:42:c7:01:30:f7:10:7c:b6:6e:a6:6d:5d:19:
7e:95:95:86:d5:90:5c:ee:1b:2d:4d:83:16:6a:7c:
3c:76:24:b8:ce:81:09:32:b6:64:e7:e8:61:e2:ce:
1d:60:3f:7e:c6:e7:ed:8f:be:2c:f0:22:e2:c9:dc:
cb:b8:b4:1c:24:8b:12:4c:91:a5:ff:11:99:fe:2d:
93:9a:05:8a:4b:91:b0:7f:5c:75:e5:99:ac:a0:48:
a5:16:bf:20:a3:9c:ad:e5:5c:8c:d3:16:1d:49:6d:
70:57:a1:2b:f0:0a:8f:d3:1e:4d:f8:1b:46:c0:09:
0e:d4:a3:4f:27:cb:57:6d:c0:96:62:8f:ee:1a:4a:
de:c3:32:29:77:c0:5a:29:e6:c1:20:86:7f:e8:71:
00:ca:31:20:40:b4:13:9a:71:8b:70:c6:46:59:0b:
95:49:b5:99:65:0f:d6:c3:37:99:8f:ad:c8:e2:4b:
4f:b4:5b:7e:99:8f:81:cd:5d:ee:f7:59:04:53:cc:
0f:63:df:31:d3:7d:9f:5f:c4:62:82:41:63:9a:4b:
2b:4c:fe:c8:8b:4e:28:97:f6:5c:37:c3:3d:ed:b9:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:FD:FC:4D:B8:29:21:4D:33:C4:48:2C:87:A3:BF:60:F5:B8:84
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:4e:42:b2:1a:a6:32:53:90:54:30:4c:19:b0:c2:d5:54:
dd:64:a9:7b:23:b6:f1:0a:52:1b:53:5d:85:db:7f:ee:e2:c9:
4f:31:4f:3d:6b:e5:2d:95:d4:8a:37:97:fc:37:02:b3:af:bd:
42:23:0f:01:9f:89:48:cb:f1:de:72:46:cd:2d:37:b8:05:68:
c7:02:e7:89:11:d0:87:73:aa:a3:bc:3a:c9:e4:48:67:4b:fb:
40:ee:6a:cf:16:91:3d:a1:b5:41:17:ff:9b:1a:07:36:75:a9:
f7:97:00:40:20:22:c6:39:40:6e:e8:e7:64:4d:96:ce:3c:3b:
24:00:93:d3:49:8b:e8:c2:3e:5b:61:eb:95:88:2a:44:98:53:
2b:54:c9:1b:6b:8c:9e:50:c8:e6:fd:4f:ab:58:a4:a0:16:a3:
96:7f:e5:94:c1:61:ea:da:16:47:0e:46:dc:f7:41:27:f2:15:
39:b4:5f:87:50:22:a3:97:b8:a8:98:c0:42:73:3c:8f:6b:d6:
9c:77:78:4c:b0:da:d7:ff:b6:f1:d1:cf:70:28:10:f2:8a:5f:
5e:c2:48:e2:16:0b:f7:79:69:bb:9e:6c:88:75:93:9e:1c:01:
8d:22:71:3f:2d:46:c3:95:ae:0e:84:92:a7:51:00:e8:fb:c2:
10:a3:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:37 2025 by rpki-client