Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: JcoUiR5YbjxpYQsX106OyNb8fuPFyurqZX+Ko3Pg3iQ=
Subject key identifier: 09:25:A7:99:1B:0F:8C:3B:3E:31:79:7F:D5:B8:79:82:5F:B3:38:BB
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019849D33086E4115D3B697D92D9DFD76FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 05D2
Signing time: Sun 27 Jul 2025 03:00:33 +0000
Manifest this update: Sun 27 Jul 2025 03:00:33 +0000
Manifest next update: Mon 28 Jul 2025 03:00:33 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: 82RDSxLxScPQysdbTp6K6TN25FaWsnic2EbM4U7cW10=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:30:86:e4:11:5d:3b:69:7d:92:d9:df:d7:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jul 27 03:00:33 2025 GMT
Not After : Jul 28 03:00:33 2025 GMT
Subject: CN=0925a7991b0f8c3b3e31797fd5b879825fb338bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:6e:e1:d7:3b:89:d6:5c:89:0d:6c:0b:f4:
2b:45:c7:2a:b3:f7:81:dc:c9:4c:37:93:63:6f:93:
56:04:a5:0e:01:91:04:d7:78:ba:70:2f:8d:a0:2b:
47:b5:22:4b:08:7e:55:8d:c7:6d:fe:d9:55:57:36:
b3:45:ed:68:15:3e:c5:11:81:72:ee:6b:85:17:67:
6b:dd:fb:b2:53:0b:fd:88:07:40:22:a0:33:e3:26:
8a:cc:7f:9a:48:00:84:32:f9:c6:06:23:bb:46:4e:
2c:d3:81:8f:ac:cf:41:8f:f1:8b:9e:ef:33:32:7e:
29:28:de:f5:2f:57:02:85:84:62:a7:e6:64:ad:10:
21:c9:ed:ed:75:86:31:4f:6a:c7:5b:60:71:96:64:
6e:65:d0:95:5a:ac:40:41:7b:c2:71:ca:b7:a2:de:
5f:9d:0f:23:02:54:ff:d3:04:9a:fe:94:f1:13:3a:
7d:c7:89:9c:c7:29:6c:48:0a:a4:14:35:1a:6c:42:
18:dd:af:ff:32:bb:76:56:89:82:90:38:55:ce:d2:
49:b6:c6:44:b2:65:4c:9d:74:a6:2d:02:fd:2a:41:
a5:ea:57:60:ca:c7:95:e1:58:81:04:03:59:1c:3d:
d7:ee:27:ce:c0:bb:eb:06:51:d1:e8:7d:b5:05:3d:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:A7:99:1B:0F:8C:3B:3E:31:79:7F:D5:B8:79:82:5F:B3:38:BB
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:b3:c8:e3:8c:cb:01:5d:1f:01:14:e2:dd:11:0b:04:c4:
74:ff:7e:2c:eb:72:dc:48:b7:b2:83:28:9c:a3:41:ad:91:fc:
42:d2:ed:cb:e8:3a:7b:1c:6e:36:b5:17:dd:02:d5:73:d6:37:
59:fd:9c:c4:0d:8b:03:0d:7b:92:57:79:ca:7e:33:f3:ed:aa:
99:48:08:2b:16:1c:42:62:4c:9a:fd:1c:59:f5:27:f6:b0:eb:
6a:3b:fe:81:75:4b:dc:a7:3e:28:91:ef:f2:5a:1a:50:30:80:
21:f3:35:af:f5:89:b4:5e:fc:2f:9e:5f:d1:3c:9a:eb:ef:3c:
e0:85:d6:eb:af:74:ae:43:95:c3:4b:14:36:11:75:17:4b:2a:
67:52:4b:09:e1:ed:83:0d:f7:b1:1c:cd:f1:17:b5:8a:fa:5e:
f8:ad:92:e3:aa:ef:ea:06:97:a1:9e:6c:85:a4:90:cd:3e:d4:
32:4c:a0:85:ef:ff:90:87:86:ae:b6:58:a5:25:d5:c1:7c:70:
0d:7b:38:aa:9d:ad:fc:5d:98:c6:86:f1:7c:7b:9e:b2:93:46:
ce:84:ab:59:63:1f:51:d8:24:8f:ef:e1:d8:71:3d:05:f0:71:
a5:60:e4:1f:d9:e9:ca:3f:2d:e2:e7:84:4a:1c:04:de:60:70:
c5:58:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:29 2025 by rpki-client