Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: 6o6dkOR/IdIRJZJCmmxxzRNHUsnHDMxvFtxx3eDW2Rg=
Subject key identifier: 0E:EC:42:AF:67:44:9E:77:4F:F5:8C:FC:8C:E1:72:06:85:F6:F7:84
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019852681D5EA0C7420BCF008E84DA7D847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0F1A
Signing time: Mon 28 Jul 2025 19:00:11 +0000
Manifest this update: Mon 28 Jul 2025 19:00:11 +0000
Manifest next update: Tue 29 Jul 2025 19:00:11 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 4qSNNhQUW9GVeCm35j+ozt/y9wLduFtLwhdsgrxqeAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:1d:5e:a0:c7:42:0b:cf:00:8e:84:da:7d:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jul 28 19:00:11 2025 GMT
Not After : Jul 29 19:00:11 2025 GMT
Subject: CN=0eec42af67449e774ff58cfc8ce1720685f6f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:c1:2d:4f:09:49:08:74:4e:3a:78:c5:49:
99:80:4a:40:7e:1d:8c:49:e4:a5:4f:cd:76:63:43:
87:86:98:b4:83:3e:52:c4:9f:fd:a0:05:b2:d3:a4:
56:12:4b:65:f1:80:e1:1f:06:64:34:ab:e2:75:25:
f8:23:c6:18:a1:a5:fd:26:3a:c7:05:da:fa:8f:5c:
b8:c1:6b:13:a3:2d:f2:d9:a1:ef:92:fc:1b:01:0f:
9a:9b:d9:ef:0d:43:4b:15:9f:b7:47:6d:78:7c:16:
74:71:40:ba:94:97:fa:5c:4c:48:21:f7:f8:a8:ff:
d2:01:91:f2:26:11:e0:eb:bd:9c:aa:52:00:cd:47:
de:fa:e2:26:ca:58:74:95:2b:11:ea:c3:b0:0a:69:
aa:45:f7:7f:8c:38:36:ad:61:d3:0f:41:25:e5:33:
9f:66:52:4c:39:c0:0e:b6:b0:9f:0e:7d:2e:80:96:
f7:19:ba:7b:5a:12:cb:2e:7a:e1:32:07:b3:00:eb:
12:1a:68:27:c7:b8:6a:bb:a2:7d:d9:e3:9f:c6:93:
f1:3d:95:ac:19:14:d6:75:ad:27:52:4d:58:c9:34:
91:38:34:29:e7:10:b1:54:7a:a2:9a:65:51:4a:7b:
c5:bc:85:89:43:38:03:37:d6:2a:c1:a2:66:ba:04:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:42:AF:67:44:9E:77:4F:F5:8C:FC:8C:E1:72:06:85:F6:F7:84
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c4:86:7c:18:e8:98:45:bc:ed:dd:56:27:79:90:b2:81:02:
07:5c:8e:11:26:cd:dc:15:69:1b:97:57:f8:d4:3a:65:30:e5:
05:2c:55:0a:3b:25:fc:ab:7e:8c:6e:81:72:ad:33:10:1b:b6:
bb:97:76:d4:e8:27:ee:66:fa:28:3e:8c:ae:5c:85:b8:90:8d:
f5:57:82:94:d6:8d:e4:3b:95:60:96:4f:0f:69:ce:a1:04:23:
ff:e1:03:02:d0:fe:ce:7c:cd:ac:60:85:fc:1e:c4:ce:b7:32:
2c:14:f2:51:54:1c:5e:b1:70:06:ff:8d:e2:f6:25:af:81:dd:
cf:33:96:1f:6a:be:13:da:1c:8c:7d:67:22:2e:72:16:30:12:
a4:55:b4:c1:88:f3:1c:09:79:0c:68:f6:52:7d:8a:7b:1f:e3:
8d:1d:4f:af:50:18:8e:89:4f:ab:34:0a:c0:6f:6a:0f:c0:ad:
9d:d3:2a:b2:dc:58:dc:64:53:e9:38:8a:ef:0c:b4:e4:55:cf:
1f:e1:db:d6:5d:09:4d:26:01:c9:9f:30:8b:0a:ce:0d:ca:33:
6f:d8:99:ad:65:29:10:89:39:a9:25:47:31:ef:dc:4a:a6:6d:
d5:b9:46:c1:d3:fe:2f:79:97:54:73:41:ec:1e:b0:a7:22:e5:
e0:6d:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:44 2025 by rpki-client