Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: GkSAwWLjziuNumR+cjI0bDtTforJeYLYup5K4sYjI4M=
Subject key identifier: E7:77:DD:6B:87:CC:E8:6D:2D:90:D8:D0:72:8D:C4:22:A4:99:95:94
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 0198560ED442DB8BE41D2EE7E4AF544A11F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0157
Signing time: Tue 29 Jul 2025 12:01:09 +0000
Manifest this update: Tue 29 Jul 2025 12:01:09 +0000
Manifest next update: Wed 30 Jul 2025 12:01:09 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: O2Ee0uQRF34reJ5Ve4srG6aFdIk0hwfotmakGkAwiMQ=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:d4:42:db:8b:e4:1d:2e:e7:e4:af:54:4a:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Jul 29 12:01:09 2025 GMT
Not After : Jul 30 12:01:09 2025 GMT
Subject: CN=e777dd6b87cce86d2d90d8d0728dc422a4999594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:2e:65:9f:59:47:51:e2:c9:0b:b9:47:79:
3d:49:9c:6b:14:3c:66:f1:42:54:aa:75:28:76:0a:
6f:2b:4d:2a:c9:78:a7:7a:85:c1:12:90:c9:9f:71:
30:b1:f2:68:11:9e:9e:51:72:8f:ea:b2:81:0d:17:
0d:40:dd:53:3c:4b:0e:cb:78:27:cf:7a:32:1a:73:
cf:a6:dd:d1:92:0a:e7:67:1b:f3:fe:93:eb:60:66:
75:18:d2:14:a2:fe:97:d0:0a:8e:55:e8:5c:b3:4e:
5b:19:cf:a5:c2:a2:ee:1e:b3:42:a3:48:f9:57:d9:
24:aa:b6:6c:ff:88:f7:15:d8:03:60:99:0f:fc:de:
d0:17:0a:3e:be:f2:d4:88:2c:9f:c0:36:59:15:be:
3a:c8:6c:49:cd:0f:ac:1b:f2:26:65:55:c9:ba:53:
5a:bf:a5:b5:ea:bc:62:f4:d8:e6:34:67:ed:bd:a7:
ac:53:26:f0:16:bc:47:d9:31:9e:6c:a2:2f:b4:f2:
58:b3:bd:c0:e0:b0:c9:3a:e8:bd:f6:23:a3:9a:f5:
97:3b:88:30:d8:30:07:f1:f0:27:a6:d3:02:4c:b4:
26:38:64:f0:8e:57:b2:2e:83:bc:26:74:9a:73:6f:
23:05:40:4b:26:bd:cd:77:e9:01:8b:09:57:25:b1:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:DD:6B:87:CC:E8:6D:2D:90:D8:D0:72:8D:C4:22:A4:99:95:94
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:e9:c0:6f:c0:ea:57:27:b0:eb:e1:52:b9:b5:10:79:79:
f6:2c:f0:27:fc:6c:ad:93:23:6b:e3:20:7d:15:7f:b3:e3:0c:
22:ec:4f:ec:58:bd:61:10:6b:8f:8e:1c:e7:5d:b7:6e:f9:72:
c6:f7:13:4d:d6:94:1f:81:54:5b:00:4b:1a:29:d5:17:8f:a5:
1f:27:31:05:66:68:19:17:3b:da:04:d0:ad:e4:35:df:87:ba:
5f:0f:3c:54:82:5d:e4:07:74:f6:d3:98:e6:e4:6f:b9:ee:c9:
0f:96:93:2d:fe:0a:e0:4c:f7:e9:2c:7c:ff:2f:43:77:16:b9:
de:46:75:97:9a:8c:e5:3b:d2:ed:7a:4f:1c:44:48:2b:8c:00:
79:1a:03:ef:59:3d:a6:e2:9d:bb:6a:a1:bc:84:6c:2a:08:d0:
cf:5e:e0:2e:c4:01:b0:ed:a0:12:b2:6d:53:09:53:f9:91:64:
ed:7e:3e:a6:16:11:87:d8:a8:65:57:49:90:a5:f6:20:f9:c3:
be:ef:4a:e1:ce:c6:cb:31:dc:4d:73:97:d2:af:8d:19:2a:aa:
52:c1:c4:22:88:8c:e7:77:45:72:75:21:23:c2:f7:46:16:33:
7f:78:c6:97:83:ed:35:4e:79:4a:58:f3:bb:15:1c:73:4a:bf:
ee:d2:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:09 2025 by rpki-client