Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: kWllQWZMOv7RqYd7tNxr4Epl7oLHw7LYcB2JIK/v91g=
Subject key identifier: 54:81:FD:5F:43:1D:31:A7:84:98:19:29:1F:30:DD:8A:31:44:58:41
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 01984B53486295F140AEAAA2EBF60DCE2DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:00:05 +0000
Manifest this update: Sun 27 Jul 2025 10:00:05 +0000
Manifest next update: Mon 28 Jul 2025 10:00:05 +0000
Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: U8i1R8hfHJXq3zYBR7RWMKjL1IhN2eT8r2eIQ05v28g=)
5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:48:62:95:f1:40:ae:aa:a2:eb:f6:0d:ce:2d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jul 27 10:00:05 2025 GMT
Not After : Jul 28 10:00:05 2025 GMT
Subject: CN=5481fd5f431d31a7849819291f30dd8a31445841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:35:32:f2:72:21:6b:07:60:17:f8:f3:88:
07:3d:e3:d4:7a:e7:49:5b:11:c6:7d:e3:1c:d8:69:
fd:3c:8f:05:fe:81:14:1c:2d:4c:61:f5:0d:f9:d8:
23:c2:f8:30:79:db:d3:fa:58:a2:3c:e2:f1:e8:6e:
1c:12:a6:58:03:93:95:cc:ac:e9:7e:0a:01:ef:ce:
95:9c:73:d8:af:f5:60:c6:a1:51:e5:5e:75:37:12:
bb:8b:8b:d6:b5:82:47:ed:76:3c:25:e8:9a:24:9c:
1b:61:95:e8:dc:54:4b:ce:6a:37:8c:ad:60:e5:0e:
5f:d1:b3:c8:ad:aa:03:85:5e:31:18:f0:de:85:61:
f1:5c:44:b2:44:7b:75:6a:b9:05:8a:1f:00:c4:6a:
d3:d5:02:b3:75:95:d4:60:16:7c:53:95:b7:6b:e3:
b1:ac:4b:4c:10:5a:ba:ec:73:6f:9d:07:50:a0:2b:
30:03:e2:5b:be:b2:2c:44:3d:af:61:0c:4d:4c:cd:
b5:dc:53:64:d0:dd:86:c4:26:aa:39:75:49:ae:ed:
5f:91:4a:bb:3a:9a:38:93:2e:0d:66:ac:14:29:ec:
19:ee:5f:3b:e5:05:47:b2:b5:8d:84:02:53:0f:0f:
f2:83:90:37:28:3c:9e:11:e7:f4:e8:1d:b6:71:8b:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:FD:5F:43:1D:31:A7:84:98:19:29:1F:30:DD:8A:31:44:58:41
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:71:d6:13:9a:c4:57:1d:c1:1a:a0:8b:06:75:8b:ea:50:b2:
6a:44:45:91:6f:44:28:95:9d:fb:4e:df:d0:ae:24:1a:98:63:
5e:9c:0f:6e:7e:42:68:59:02:d1:2c:84:26:5e:a9:d2:0e:6e:
11:84:b7:49:2e:e4:ea:81:00:e3:2f:17:f0:c4:d0:d5:db:60:
73:c6:f9:49:7f:c0:32:a8:80:73:98:ea:3b:4d:7b:dd:8f:5a:
40:d4:7c:71:a6:74:4d:20:9a:ad:e8:55:8f:04:f1:33:c1:35:
3d:1c:84:00:90:6b:88:73:54:7e:bf:94:27:9e:c8:f9:ac:b6:
14:c2:e4:43:94:95:72:ed:78:7e:03:b7:22:49:c1:34:9a:0a:
45:5f:f0:0c:05:5a:34:55:be:6d:28:43:ba:21:5a:56:bb:d7:
87:dd:a9:b4:1d:e8:d3:72:8d:e9:a8:dc:df:39:00:0f:b0:81:
e9:1c:0b:24:d6:29:52:b1:01:85:cb:78:69:26:ff:85:59:44:
e3:f1:13:55:0c:20:99:d1:9a:cf:62:55:b3:4d:e7:45:1c:d7:
c6:77:01:5e:b4:82:53:1a:e6:54:80:73:4c:ba:e3:4a:e6:e5:
71:e6:e3:5c:97:d5:1e:96:41:fd:0e:29:f2:49:5f:50:86:2d:
9e:14:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:15 2025 by rpki-client