Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: 2XQyRO4mgHfXFbNrn4PORGCJQwm6ETHZpFo3CTPjvPw=
Subject key identifier: 84:AE:B7:07:A5:D0:73:93:30:CD:21:9A:3F:12:22:37:A3:46:A1:AA
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 01984AAF370FF5DB50E4D4D34DDB0B28D8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0D5C
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: o+qtJuazn9O5xJrJZtrqDIw2v9jcSAFSlH9erZ8IRVQ=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:37:0f:f5:db:50:e4:d4:d3:4d:db:0b:28:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=84aeb707a5d0739330cd219a3f122237a346a1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:e1:b7:79:ee:c6:f4:22:c3:f7:5a:ff:aa:
a5:5c:3d:d3:99:46:74:bc:23:e7:b6:3f:77:81:a6:
55:77:f1:20:83:0a:6a:e2:b7:d9:f1:ff:05:94:66:
d2:11:8b:04:a0:22:86:68:fe:53:08:f6:5b:50:27:
c3:33:d3:63:68:46:ce:02:0f:86:fc:54:e9:d8:b2:
86:46:a3:0f:ce:71:7e:9b:8f:69:67:2e:4a:9d:fe:
c3:b1:75:72:d5:bf:91:bd:b3:40:17:2c:4a:57:4f:
5a:f7:9a:61:c1:77:ab:27:41:d9:f2:ac:98:fa:5a:
e0:05:d2:a4:72:44:20:0d:1e:02:4d:7a:3b:5c:8b:
af:f8:58:be:76:80:51:9b:50:3e:d1:83:c9:11:52:
ec:cc:74:d8:e8:0d:cc:c8:da:0f:d9:d6:8e:75:3c:
19:72:cb:51:63:a9:e1:84:91:05:9a:13:57:cf:8a:
fc:af:3d:26:d4:68:b8:cc:54:69:e3:eb:b0:fb:7b:
ae:6d:f2:36:56:e6:39:88:a0:ce:d9:df:fd:b7:20:
a2:47:dd:8d:db:74:76:41:fe:3d:ca:29:33:bf:c7:
57:65:4c:db:5c:16:9e:5c:35:c0:23:07:43:04:11:
28:33:1b:f4:8b:55:02:ee:fe:09:2f:84:52:a4:65:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:B7:07:A5:D0:73:93:30:CD:21:9A:3F:12:22:37:A3:46:A1:AA
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:2b:d8:5c:46:11:05:66:ca:62:ba:f7:22:bd:d8:93:d3:
9c:53:1e:ab:d2:0b:91:10:10:71:8e:2e:22:1a:41:ef:74:a2:
74:0d:7e:41:7d:78:aa:c8:63:27:7c:32:a2:78:23:ca:82:8f:
a6:9a:ad:46:54:13:a4:65:dd:9f:e6:26:26:9d:75:19:7f:cb:
56:3d:a8:a9:87:a4:d7:a0:a8:8d:c6:78:f8:cc:9e:40:59:d9:
2b:06:f6:bb:d0:42:0f:1e:49:c6:44:45:2f:29:e4:50:b9:f4:
9a:5b:97:98:8d:5c:5e:ea:90:bb:b9:fe:c1:b0:8e:9e:7f:4d:
bf:a1:61:dc:10:78:51:f1:17:e8:ef:a1:4e:c2:dd:3a:ab:7b:
f6:5e:38:6d:72:36:18:79:f0:4e:23:3d:9c:f1:ee:f8:58:33:
79:33:54:03:e4:8b:5f:c7:ad:71:10:cc:d3:61:0d:cb:ba:00:
4a:f2:e0:1a:10:e4:08:1d:8e:89:75:fe:91:0c:91:e4:4d:27:
16:c4:06:a6:1d:ed:da:dd:8b:3a:df:9f:27:33:70:ed:ab:0a:
a1:a0:d8:24:ce:69:0d:82:7f:ce:e2:5b:a6:4c:ad:35:6e:2e:
16:ea:84:98:2e:ae:07:9b:1a:0c:e6:3a:d7:d2:71:f8:a5:2a:
a8:8c:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:41 2025 by rpki-client