Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: OVsjFJm4XNCK2iaZMCiZ0ll96z3qAn9LYarV8MPQV9E=
Subject key identifier: BB:1E:51:F3:3A:ED:12:A8:D2:43:4B:9D:37:BC:86:41:B3:94:04:0A
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 01984A40F93B85716996C4E58F572C9835AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: nqReCrajmkuNgedVp0PJAPdsXoVGIlmeX4bdrlduLp4=)
2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f9:3b:85:71:69:96:c4:e5:8f:57:2c:98:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=bb1e51f33aed12a8d2434b9d37bc8641b394040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:6c:79:a3:dc:34:8f:90:b5:08:1d:e7:21:
85:43:34:5b:8f:e5:0c:8d:5c:81:2a:c3:05:6b:a3:
b2:0c:b7:a4:b7:d8:aa:70:23:0f:87:c4:6b:0e:68:
6b:5a:11:1f:f0:cb:ea:d3:28:65:f7:f2:88:77:3b:
41:39:80:dc:5a:a2:e4:db:cb:7c:f5:87:88:5e:74:
fa:8c:d7:b6:48:86:d2:eb:e5:8d:fc:2d:e7:04:a3:
77:6b:f2:5b:6a:e6:8a:04:86:18:49:3c:2c:4e:e2:
22:d1:eb:8a:81:a4:f7:92:77:f4:7e:3b:d8:3f:83:
aa:b8:53:c4:b8:14:c8:81:51:c0:0a:32:1c:33:86:
9b:98:31:78:6c:87:77:a1:11:20:34:bd:6d:ac:30:
de:ee:fd:c1:fb:f9:09:f6:e5:18:98:3a:e7:2e:4d:
3d:2a:3b:fe:b4:ae:20:36:29:59:74:58:f9:cb:f1:
33:8a:33:13:d8:55:a6:bb:77:3e:ac:3d:2e:35:47:
4b:10:14:a1:a2:27:73:68:3a:56:46:21:66:24:3b:
28:51:31:92:bc:58:b5:7b:3b:6c:f4:39:5f:43:84:
65:4e:b9:b2:a5:80:96:b5:8b:bf:3b:68:dd:4e:68:
3b:f0:9e:0f:b6:94:93:01:cf:e0:2c:c1:54:2d:7c:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:51:F3:3A:ED:12:A8:D2:43:4B:9D:37:BC:86:41:B3:94:04:0A
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:53:da:8b:fd:d3:c0:c5:93:40:04:35:29:eb:19:87:16:
73:ef:4e:f1:08:94:37:a5:e6:2f:87:a9:c9:41:c8:eb:47:b9:
42:bf:27:ea:f1:45:a7:c7:58:03:12:d9:8a:42:2e:ca:6a:a7:
94:d0:c4:c1:37:15:54:d8:d4:98:c4:4f:c3:24:51:1a:b7:fe:
8e:49:13:18:30:95:2b:e1:d8:40:10:50:41:bd:0f:f8:79:60:
7e:0d:7f:e6:e0:81:e2:46:73:44:32:1f:43:3e:08:19:8d:37:
59:ae:71:fa:c8:e1:06:bc:6f:07:34:59:6a:a5:4a:f4:fe:22:
02:82:7e:63:09:84:46:1b:9c:aa:a4:02:88:c1:86:76:a4:09:
ed:84:89:c3:ff:14:20:15:ba:24:be:a2:d4:9f:a1:2c:ce:b1:
6d:06:2e:86:e4:e2:c7:ea:93:fb:3d:76:b4:b3:a4:1f:2d:fd:
9a:c5:df:93:57:06:23:ca:68:ed:4c:0f:3c:ac:71:ff:78:6f:
3e:fa:69:38:b7:83:3d:06:57:1a:2b:13:fb:03:a3:7e:66:a8:
0f:b1:70:ac:b3:6e:6c:87:36:88:03:c2:2a:1a:51:2e:b0:1e:
09:9a:c1:f6:31:10:61:5c:3b:1b:b5:86:3d:19:98:e6:f1:5f:
06:5e:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:19:16 2025 by rpki-client