Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: NPJvkrfN8Ym8an9bxyIJdqZN2WyudBOJaR5ULivbrbo=
Subject key identifier: 0A:4A:A9:CB:67:8E:C9:0C:7C:DF:27:7E:38:5E:19:D5:7B:81:95:62
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0198488989CF04CA1E44EE09753865F6F2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 21:00:29 +0000
Manifest this update: Sat 26 Jul 2025 21:00:29 +0000
Manifest next update: Sun 27 Jul 2025 21:00:29 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: n1uLsLx6RSGNNRJZMMJjPbeY8eNFmM1TwY1mhWACHSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:89:cf:04:ca:1e:44:ee:09:75:38:65:f6:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Jul 26 21:00:29 2025 GMT
Not After : Jul 27 21:00:29 2025 GMT
Subject: CN=0a4aa9cb678ec90c7cdf277e385e19d57b819562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:01:5a:1a:b9:2b:9d:35:82:33:1e:13:f1:
f7:62:9b:70:d3:aa:9c:24:59:7f:b0:ed:6e:34:c1:
b9:4f:6b:96:e1:4d:15:67:04:27:42:d6:7a:70:73:
fb:a6:ec:78:ad:b9:2f:63:6f:b4:64:06:a0:cb:3e:
cb:77:cf:32:59:82:18:a3:7b:ac:d9:fa:42:77:18:
83:e0:a0:c9:c5:4a:97:53:1d:be:a8:1d:a9:dd:33:
2e:f3:de:82:b0:b4:89:6e:63:9b:a6:16:67:2f:69:
5f:26:e9:71:5e:3c:7b:6c:c7:47:34:10:10:52:c9:
22:e3:6b:18:91:79:51:93:ed:e5:e1:30:0e:17:9c:
d1:79:14:68:11:bb:f0:45:cd:47:cb:44:33:f5:44:
d2:e7:f7:14:06:d5:a7:0f:a2:b3:99:63:d6:1a:ab:
7c:e6:e9:38:6a:a7:73:5d:c4:0a:43:6d:b1:b5:25:
29:78:52:42:88:5d:11:59:79:f8:7e:71:4e:0a:b0:
ef:d5:1f:b8:6d:bc:e2:59:6e:b3:07:09:d5:49:cc:
cc:56:73:2d:b8:05:56:52:ac:92:e7:62:42:94:c8:
43:e9:98:59:ad:1c:dc:4a:96:ad:68:ba:47:3b:da:
37:54:c4:7d:bb:cc:aa:dd:5d:6a:17:5d:43:96:7d:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:A9:CB:67:8E:C9:0C:7C:DF:27:7E:38:5E:19:D5:7B:81:95:62
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:18:82:cf:cc:e5:e3:79:5e:03:f8:44:96:f0:c2:3a:8b:
5d:2a:7a:65:fd:92:9e:e3:da:20:9f:28:80:e6:23:13:80:a6:
ca:17:51:79:1b:5a:d8:0e:73:b0:99:be:cf:7e:ed:68:1e:0d:
b6:b0:e7:e2:45:71:86:c4:59:24:82:ec:5d:53:70:db:43:bd:
2a:f6:33:cd:f3:c9:e0:b4:8d:6d:09:a2:9a:7c:7d:10:12:20:
9b:bf:da:5d:e9:6d:93:82:b1:01:9c:33:8a:9a:1f:41:fd:b2:
d0:b3:6d:be:9d:55:d2:71:43:b1:42:2d:3d:ef:aa:e3:cb:8c:
5a:b1:1c:a9:06:2f:12:38:d5:75:8d:5c:a6:e8:5a:6f:34:64:
8d:72:00:36:58:fc:d2:cc:86:4f:61:27:6d:17:9c:f7:a6:6e:
04:2e:87:6c:da:89:a2:dd:73:7a:97:55:7b:c4:26:e1:2c:8d:
0b:5f:72:5b:49:f7:f9:f8:d5:cc:4d:a3:66:74:cc:a6:92:59:
34:08:18:9f:e8:c7:a8:ac:fe:44:83:ab:cf:c2:38:b4:ae:05:
83:ab:4a:43:b6:94:ae:7e:6c:c7:80:d2:2e:b1:b0:92:76:28:
eb:07:0b:a6:3c:d5:c3:86:8f:89:a1:bb:fb:23:45:b7:40:8b:
de:0c:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:21 2025 by rpki-client