Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: lXlmTLWVff237udVGwyCXLOJTDX47RdVsW0hzaQUDOw=
Subject key identifier: 70:69:C0:79:DD:CE:2A:6A:18:19:B2:FD:1E:39:FC:6C:B8:F9:F1:5E
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01984AAE8831365DB458F346189D82B06BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 02ED
Signing time: Sun 27 Jul 2025 07:00:08 +0000
Manifest this update: Sun 27 Jul 2025 07:00:08 +0000
Manifest next update: Mon 28 Jul 2025 07:00:08 +0000
Files and hashes: 1: QIeHQolwi-ZHoT37sWf6aH03ldI.roa (hash: AlkTkJeW2VJO+UFmkCUHScw4aZ4Ip+r5zZOUYl0xkpQ=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: jL67MCYSmCyHWV++8UxT+MVIbDp1vTIhcBfVmFxZeX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:88:31:36:5d:b4:58:f3:46:18:9d:82:b0:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 27 07:00:08 2025 GMT
Not After : Jul 28 07:00:08 2025 GMT
Subject: CN=7069c079ddce2a6a1819b2fd1e39fc6cb8f9f15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:af:ac:0d:82:cc:51:6e:42:d1:8e:8b:f7:
98:58:be:47:e7:cd:ec:8f:1a:97:8f:74:68:b2:14:
67:d9:02:02:bb:f8:1c:ad:ea:cf:69:dd:6b:5d:c1:
ba:a2:c8:9a:bc:08:23:00:99:ec:fc:9f:70:d4:ce:
6b:25:01:79:8f:69:2f:e5:8a:44:73:ef:d3:1d:97:
8c:87:50:50:45:e9:7f:45:b1:d8:e0:a9:1c:44:e8:
e7:59:7c:f1:93:19:a3:75:02:ad:76:b6:4c:7e:57:
a3:97:64:ff:f7:48:0c:4b:28:d3:a0:68:6a:0f:cd:
d8:6f:61:7f:c6:a8:ef:9d:c6:6c:45:e7:c2:e8:c6:
a6:e7:b0:a1:6e:19:da:28:99:b7:3f:91:df:71:63:
1c:9c:5c:5d:6b:d7:17:28:0f:68:d9:39:c3:03:0c:
67:20:6f:1c:4b:07:c4:47:09:d7:f7:7f:26:4f:aa:
06:a9:65:0b:d0:7d:16:db:f0:46:48:ae:2c:6f:a2:
ab:77:96:7c:28:4f:06:9c:f7:4b:a2:8e:0d:74:52:
cd:f9:7b:36:b4:92:b0:3e:16:68:52:b3:34:b3:84:
16:ed:31:d4:d6:8c:15:a9:42:df:13:7d:29:77:60:
4e:dc:42:c6:17:44:d7:53:6f:06:95:d7:f8:89:b4:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:C0:79:DD:CE:2A:6A:18:19:B2:FD:1E:39:FC:6C:B8:F9:F1:5E
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5e:a4:37:8c:d5:ee:bc:a4:98:4f:6c:ab:cd:7c:df:22:14:
2a:a2:ff:aa:70:2b:5e:48:65:1c:61:d8:dd:88:52:d2:03:f9:
86:53:b5:00:68:15:ac:23:15:81:47:cb:ed:27:dc:eb:09:91:
84:4d:58:7f:bc:c4:82:ac:5b:06:70:50:e2:c3:ad:6a:7f:de:
4c:4b:f3:d6:ac:5a:50:39:0a:c8:59:4b:77:97:10:b4:6c:a1:
51:c3:40:28:5a:51:00:30:12:cb:b9:b3:34:a9:66:5c:c0:8f:
e5:52:bc:50:69:35:1b:89:0a:a1:66:81:6b:bf:d7:9f:6b:4d:
dd:0b:42:11:04:bc:d1:c4:11:95:f0:56:a6:09:1b:e6:7e:6f:
29:75:f0:2d:e2:e9:7c:c2:4e:7c:e0:9e:57:ab:19:c1:3d:20:
8d:e4:48:77:4b:49:b2:93:a7:84:32:c1:d2:73:15:2d:62:91:
e4:55:73:81:9b:76:49:1e:46:a1:32:88:bc:15:01:e6:7a:4e:
1e:01:0b:ab:b7:51:d2:55:eb:52:6d:ea:e9:de:6d:92:96:e0:
60:54:64:b5:46:4b:cf:eb:74:b0:e1:26:34:2c:f2:85:34:bb:
db:89:e9:e2:a1:e7:ed:dc:21:3b:92:48:52:97:8f:e8:af:40:
f2:bd:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:43 2025 by rpki-client