Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: xR/05tpbje02s1Ypp86MuzZLrFRrzsRFX0sertdfbD0=
Subject key identifier: 38:9E:B1:4C:26:DF:51:97:34:A1:62:A9:20:43:B7:16:C8:D0:AC:A7
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0198D54E035BF401A09E075995CB22AE01BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0A21
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: GpU4s/DmjQEJbdL6s7G6yoiTi26MAK83accpOOLFh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:5b:f4:01:a0:9e:07:59:95:cb:22:ae:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=389eb14c26df519734a162a92043b716c8d0aca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:d2:31:8d:92:88:4c:cb:c2:a9:f8:4c:12:
a6:9f:ec:ed:09:a0:5d:65:1b:89:96:20:d6:61:53:
73:df:cd:1c:b4:8a:c8:b1:c1:94:d2:93:ee:da:38:
99:ed:52:33:a2:c2:65:1f:fa:b5:fc:a7:40:48:2d:
30:41:57:d7:58:8f:c1:bb:cc:7e:ac:a1:10:a5:4c:
f9:59:6f:d8:18:6a:f2:cf:4e:63:98:44:c4:1b:7f:
3d:be:0f:24:85:05:6f:32:70:74:68:d3:18:9d:87:
77:2e:dd:77:c3:25:d1:d2:c1:56:12:cb:8f:f4:32:
cc:49:e0:92:bd:9f:8e:e8:90:15:31:9b:4a:69:8e:
74:84:fa:2f:20:2c:b9:26:ec:1e:bd:e7:a8:00:52:
11:99:75:5c:e6:4c:92:26:b0:2c:93:78:e8:d1:0c:
1d:d8:df:6f:4b:37:ac:f2:b4:85:c0:30:77:1f:ef:
5b:42:36:6b:7c:e6:29:ff:a7:63:e1:5b:cc:51:06:
2e:66:f9:6b:09:98:d6:7e:6a:3a:86:a3:5a:c6:4f:
5a:0d:77:e9:93:e8:86:3c:f8:31:d1:16:7a:28:3b:
3c:00:06:2f:c6:13:7d:81:18:b6:17:ee:1f:c1:f8:
11:9a:33:07:95:b8:c6:05:f8:0e:9a:18:c7:b7:d9:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:B1:4C:26:DF:51:97:34:A1:62:A9:20:43:B7:16:C8:D0:AC:A7
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:5c:0f:ea:70:b3:9f:7f:03:4a:43:9a:c0:d0:3c:0e:ed:
ed:ed:f5:b3:12:eb:8f:ce:ab:7b:2a:2a:e3:f5:3f:49:cd:ae:
1c:37:cc:8c:4a:2e:92:44:50:ac:b9:ee:49:86:d0:41:f3:2e:
66:cf:0e:1a:21:07:e6:1e:89:62:de:50:28:8e:d2:a4:86:a3:
af:ec:10:3e:2c:17:7b:59:6e:70:95:8b:31:07:ed:ad:24:3a:
de:67:d3:60:bc:4e:cc:8a:79:2a:9a:f8:c2:38:18:f2:05:ec:
4c:8b:2e:f0:73:1f:74:9b:4e:57:7c:41:46:a2:c7:94:0e:63:
6e:ef:2d:95:90:aa:d7:98:90:54:34:fb:f6:ab:59:5d:86:45:
e2:d7:8c:c3:e6:82:e0:00:cc:f3:f9:88:86:13:1b:7a:f7:92:
ba:af:5c:80:5a:7d:53:df:c3:16:ae:34:0a:f9:80:e6:8b:17:
0f:24:c4:65:a9:5a:10:39:52:d6:93:c7:70:ea:7f:22:7d:b1:
1d:2f:a3:f0:f5:ee:97:49:2d:51:1c:49:1d:51:5f:9f:1a:4c:
12:7d:df:fc:98:34:d4:a8:c7:b3:7e:f9:81:6f:57:9a:23:f5:
68:c2:83:91:0d:4b:95:c9:90:20:79:e9:39:a1:a1:6b:43:9b:
cb:62:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:46 2025 by rpki-client