Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: ZxHpEnVCf1i7jpU7s90rV4btfkUOi/ZFXxs1H7Tm7y4=
Subject key identifier: 43:C8:44:46:C4:39:9F:75:99:DA:AD:35:32:A7:6C:6D:6A:74:54:AC
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 01984A41979983D29CF42C6D396BD6621AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:01:09 +0000
Manifest this update: Sun 27 Jul 2025 05:01:09 +0000
Manifest next update: Mon 28 Jul 2025 05:01:09 +0000
Files and hashes: 1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: l6KziA5cBbi5Q7+zYLdr6XxikWADbBLps7C+IMkk+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:97:99:83:d2:9c:f4:2c:6d:39:6b:d6:62:1a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Jul 27 05:01:09 2025 GMT
Not After : Jul 28 05:01:09 2025 GMT
Subject: CN=43c84446c4399f7599daad3532a76c6d6a7454ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e6:a7:46:94:5b:de:83:80:20:44:16:11:
9e:2c:0f:0f:7d:d7:18:71:11:17:3d:1e:b9:bc:e3:
b2:4d:6f:46:6a:bc:43:3d:d1:59:df:d9:28:f7:24:
af:10:a7:cc:ab:91:0b:b2:e0:62:a1:06:a3:31:b4:
64:75:b8:84:32:44:00:9e:dd:af:2e:28:3a:87:cd:
61:5e:02:4d:c2:de:28:20:3c:88:a4:6a:46:98:68:
de:40:2c:98:e2:74:18:c9:3a:85:ff:f2:1f:c7:60:
b0:de:7e:cb:6c:8a:75:62:cf:ad:28:6c:35:bb:9e:
a6:82:34:f3:bb:84:f1:c5:d8:8d:2f:61:3c:76:9a:
2e:72:80:c3:02:37:e2:aa:57:d4:07:6d:bd:83:2e:
70:64:e6:bf:a2:de:21:32:12:3c:7e:47:47:5e:b4:
5c:36:4a:1c:1d:ae:80:61:48:26:72:bc:e0:1a:d0:
59:57:85:35:93:a5:29:4c:61:50:d0:8d:eb:d7:a0:
53:1a:63:4b:fb:37:7b:6b:df:c6:43:cb:b1:d7:c3:
13:ec:4b:05:6d:45:68:5b:53:06:71:24:37:3c:4d:
55:65:18:79:35:6b:14:1f:af:ee:2a:df:dc:d8:dd:
d9:1b:7d:fb:ed:71:bb:14:23:10:e9:3a:bf:31:d8:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:44:46:C4:39:9F:75:99:DA:AD:35:32:A7:6C:6D:6A:74:54:AC
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8c:cb:9e:b3:bd:da:d8:33:f4:ac:0c:fd:c2:19:23:11:22:
f1:fe:a8:63:a5:55:39:c5:c1:da:fe:92:49:41:8b:b5:58:8d:
02:af:b8:8e:90:de:f3:52:49:23:43:c2:79:51:a4:c3:fb:b1:
18:01:2c:0d:b0:67:55:88:a1:63:c6:b3:48:46:33:02:ed:14:
d6:23:80:3b:b2:e6:47:52:09:e7:0c:03:0d:e6:12:e8:87:65:
9d:e8:f2:b0:3d:34:3d:8e:fa:bb:e3:6f:70:49:a5:b0:cb:0a:
eb:f8:f0:fc:f3:12:c9:57:8a:8a:e3:e8:7b:4c:be:c0:51:02:
c7:45:f2:ae:2a:77:de:d5:75:b8:d6:2b:28:c8:cf:d4:90:88:
1c:a5:09:3e:ba:1c:8e:23:a8:07:ae:4a:28:50:f2:0a:d7:56:
98:e6:b9:b7:da:fa:0c:9c:82:56:18:b5:63:31:8e:cb:43:43:
62:a3:f6:27:64:d9:cc:a4:2e:ea:a1:f3:70:2a:6a:77:92:25:
9c:15:ae:b6:fe:04:8b:15:fc:1d:d3:7b:85:12:35:f0:3e:76:
5b:9e:3a:21:fe:e7:de:1a:24:2a:ee:f8:77:a1:a9:71:a2:60:
7f:fd:96:19:3b:c2:6d:a7:ef:c6:dd:31:8b:36:f2:25:ab:ea:
66:3b:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:12 2025 by rpki-client