Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: amiYdY1tJcRBmxW5u42GQJSakdNvGCJn5AHbzvoFgQQ=
Subject key identifier: B2:11:A9:72:55:BD:70:70:5B:8B:82:D3:FF:0B:2E:8A:82:A4:4A:21
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 0198D705DDC9550B097BC374F13DB73D318C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 105D
Signing time: Sat 23 Aug 2025 13:02:22 +0000
Manifest this update: Sat 23 Aug 2025 13:02:22 +0000
Manifest next update: Sun 24 Aug 2025 13:02:22 +0000
Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: J5m3GQsrDbf5JMqtGRMU2lzgGvePWmKLsDSRxDGqjFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:dd:c9:55:0b:09:7b:c3:74:f1:3d:b7:3d:31:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Aug 23 13:02:22 2025 GMT
Not After : Aug 24 13:02:22 2025 GMT
Subject: CN=b211a97255bd70705b8b82d3ff0b2e8a82a44a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:fe:e6:11:2d:ac:fd:e4:32:da:e3:67:0b:
f2:24:83:03:69:88:d5:d7:47:41:04:1c:52:01:6e:
f6:76:7c:89:2c:62:c2:c0:ce:6a:ba:97:31:e3:d3:
65:e9:56:69:d0:85:3d:9c:91:99:78:40:e2:c9:df:
71:85:d1:94:26:f0:44:5b:ba:a0:e5:7a:c5:f3:8d:
3f:20:57:ec:a7:6d:49:50:d6:18:fb:58:56:64:ee:
4a:63:ff:f7:cb:f0:dc:27:31:9a:1e:2c:d8:37:2d:
0c:6a:4a:4a:1a:c3:b2:39:70:be:ec:5f:a7:85:95:
7b:2a:83:51:b1:ba:c7:2a:ca:c3:e4:f1:03:09:34:
43:d3:43:ed:c8:be:34:be:5b:49:1f:e5:2e:2d:10:
f2:16:19:4c:b6:99:0a:1e:60:fb:35:26:59:80:4a:
d3:ba:c7:8a:e5:38:6c:9c:bb:43:8a:43:ef:33:3b:
67:c4:44:b4:9d:7a:3a:c2:69:56:1b:25:3f:57:7a:
67:71:c9:c1:9e:46:08:77:27:fb:74:17:84:80:c7:
de:5c:7f:5e:c5:64:2e:65:e7:a2:c2:89:c4:14:28:
bd:26:a9:10:2a:14:1a:60:11:ca:62:ac:e4:f7:f4:
47:09:32:a7:62:54:1b:19:e3:f2:eb:8e:f8:20:83:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:A9:72:55:BD:70:70:5B:8B:82:D3:FF:0B:2E:8A:82:A4:4A:21
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:22:5c:86:2e:cc:02:bb:6d:12:8f:e9:f6:e4:ac:4c:b2:f8:
c4:d7:13:ab:ff:20:09:b5:ac:39:b3:37:a3:79:67:79:4f:ea:
95:8d:16:dd:e8:be:9e:36:7f:00:f7:fe:1c:08:0e:a1:a8:f1:
74:02:9e:86:40:ee:40:78:23:79:de:5b:06:10:e6:f6:cf:d1:
be:1b:d4:f5:a1:83:69:e4:c8:67:a7:a8:fb:91:76:d7:8c:66:
04:f1:e5:2d:76:f6:e9:3f:fc:d5:69:e1:a9:e0:ee:27:54:6e:
f9:f3:2a:55:1a:37:e6:3d:57:91:48:fb:9a:ef:a0:0f:04:b2:
a5:14:c6:e1:24:84:c9:88:98:8b:8b:1a:96:07:2f:97:bc:fd:
81:8e:80:8c:27:f1:82:70:40:a1:a1:f5:d6:54:3c:e8:90:6e:
7a:ec:d2:c2:4e:6d:e5:bc:b2:06:6f:c0:cc:12:fc:1a:59:69:
b1:71:6e:1f:b5:2d:6d:6e:35:24:8e:77:35:88:80:88:0a:a5:
3c:c8:71:d4:71:bb:4c:5c:d2:2d:6d:8e:6d:e2:29:50:94:e3:
c1:24:a1:95:2d:6e:c0:b2:74:65:d7:8f:25:87:46:fa:5f:d5:
69:c4:02:09:0c:18:8f:b0:be:e5:c5:9e:f0:a6:d9:99:2a:7f:
24:a8:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:17 2025 by rpki-client