Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: N7n6dqNLc4Pys0yscTrEVNE+xUzK+OybtiU2pDoeOsc=
Subject key identifier: 34:DC:C8:24:3B:32:3F:98:AB:9B:BB:AF:B1:0A:CD:01:21:B6:71:8C
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0198D77371746CAD3EDB5B5AFE0CA51677A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0CDA
Signing time: Sat 23 Aug 2025 15:02:03 +0000
Manifest this update: Sat 23 Aug 2025 15:02:03 +0000
Manifest next update: Sun 24 Aug 2025 15:02:03 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: yArW8ZYLCYxhL2Z7xzDcxadOumDkWCQ2Zjhv91VK9vo=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:71:74:6c:ad:3e:db:5b:5a:fe:0c:a5:16:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Aug 23 15:02:03 2025 GMT
Not After : Aug 24 15:02:03 2025 GMT
Subject: CN=34dcc8243b323f98ab9bbbafb10acd0121b6718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:88:a4:6c:ba:41:12:8d:58:cb:3a:82:58:
1f:b3:96:7a:fe:d3:64:55:42:fd:fa:3c:54:87:72:
5f:db:c1:df:38:d4:a6:e5:8c:ba:2e:2c:1f:95:fa:
e9:21:50:9d:db:07:eb:e0:74:8a:fe:2b:0a:46:4e:
44:50:8d:f1:a7:f3:bc:6a:c9:9b:5f:90:eb:3b:b1:
7b:48:80:cc:13:51:ea:e5:5e:ed:35:6d:9c:d8:ae:
44:d8:a0:d5:7a:d4:7a:85:5e:45:6d:63:16:54:1e:
7e:66:5b:24:ac:56:d3:8d:ea:c4:45:7c:ea:fb:b3:
0e:73:13:a2:2b:c9:d8:41:5c:23:de:58:28:3c:d1:
9a:a2:7c:d5:d4:e7:6d:2d:67:e6:06:67:3d:66:f2:
f9:ba:ea:c2:8f:b4:6d:c4:b1:8a:07:90:58:b6:9b:
23:24:59:6d:95:f4:55:54:54:64:dc:ff:0c:3f:57:
2a:db:4c:2f:ef:87:c6:5b:6b:ac:ea:83:2d:19:04:
5a:16:ac:59:19:3f:f5:e2:43:00:af:6d:93:7d:4e:
45:83:90:80:62:3c:9a:14:0f:1c:1d:c3:ce:37:5e:
58:79:ad:e7:8f:26:5c:75:af:a4:9b:06:14:30:88:
bc:75:fc:34:0f:93:89:12:76:32:5f:24:2d:f4:5c:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:C8:24:3B:32:3F:98:AB:9B:BB:AF:B1:0A:CD:01:21:B6:71:8C
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:db:cf:da:85:4f:77:15:68:80:20:a2:23:79:53:20:2b:19:
a3:d1:1d:1e:f5:f8:52:6f:c9:ef:06:7b:52:6a:5a:b6:e0:ba:
3f:a9:94:1c:8c:5a:fc:db:a3:19:90:4a:ed:f4:0a:d8:f5:e9:
e0:7e:61:47:25:01:04:a4:2c:df:22:40:d8:72:19:7e:cc:0c:
c2:f3:75:5b:db:cb:f0:c7:2b:9b:ca:30:0e:15:1a:5f:1a:db:
00:da:70:5f:4a:a4:2c:33:4a:87:cb:d1:9e:c7:7d:3c:30:1c:
c0:1c:5e:14:a7:6b:45:a4:93:2c:d0:98:45:fb:58:18:80:e1:
21:2a:2e:5c:a5:c4:df:a0:02:86:a9:5b:55:64:20:9e:4d:ce:
d8:58:dd:94:d0:68:bf:29:10:93:77:ff:70:37:ff:c7:2a:25:
ec:08:ae:e4:28:2d:d6:64:e6:e7:05:f6:c4:a4:86:69:38:f6:
ec:c6:3d:ec:28:8f:66:4f:02:e9:b1:02:18:37:54:a7:ea:93:
27:a8:9b:6f:01:c1:8e:c9:60:8d:84:52:50:c9:d8:77:d1:c9:
1d:6b:be:87:cf:f0:3b:53:92:8d:00:3b:f9:d9:f4:32:c2:48:
5e:f6:a0:9e:82:3c:c3:9f:30:0b:ba:6d:6c:da:40:6b:15:0a:
80:91:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:40 2025 by rpki-client