Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: QlPkuP6yLxytLNVLkU7xeDPipzoPmfVfzJ3o6u9F2Xs=
Subject key identifier: 1E:7F:94:9C:71:10:EA:7B:63:88:C2:6B:72:B5:93:57:80:7C:7E:B2
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 01984AAEF51DD332EA631F81DA541C7578BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1351
Signing time: Sun 27 Jul 2025 07:00:36 +0000
Manifest this update: Sun 27 Jul 2025 07:00:36 +0000
Manifest next update: Mon 28 Jul 2025 07:00:36 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: LePywbwovxIKNJL/VEFYphlC0SU/vWZ5gMgcsOeSXXs=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f5:1d:d3:32:ea:63:1f:81:da:54:1c:75:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jul 27 07:00:36 2025 GMT
Not After : Jul 28 07:00:36 2025 GMT
Subject: CN=1e7f949c7110ea7b6388c26b72b59357807c7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:81:46:f5:28:a7:a9:32:71:dd:a2:e0:1a:
99:8d:56:99:b3:8d:b8:9a:1b:57:b8:28:22:55:81:
38:9c:fc:ce:5f:4e:ad:55:ce:55:e9:31:94:08:3e:
66:1d:9a:71:60:c7:bb:73:33:fc:63:a6:c6:27:6f:
f4:c8:bd:eb:0e:20:18:a0:91:09:b3:0c:ee:9e:75:
06:2a:d7:1f:85:41:56:b4:5f:04:fc:d7:20:74:3c:
a5:ab:ec:a8:b4:79:1d:70:b8:13:cc:7e:6a:d3:f4:
0b:80:3f:27:b8:ab:87:8b:0a:f2:dc:f9:54:d7:ca:
69:6a:b4:6a:34:d3:7e:49:53:51:c1:29:a9:62:3f:
03:2f:d7:2d:49:03:d9:05:b2:c0:e4:c8:79:25:d3:
41:dd:57:fb:5f:e8:5e:d6:7b:ee:4d:eb:44:a2:91:
50:27:a5:11:9d:ec:ab:82:52:63:62:8a:f8:29:d4:
63:d8:a4:50:16:ea:33:2e:d4:4e:94:9a:ef:a1:1e:
f6:23:71:cd:bf:0a:9c:bc:ca:3f:7f:2d:fe:51:56:
d6:99:f8:02:14:bd:af:97:91:5f:05:58:44:1f:ae:
5e:20:9e:fd:3c:3c:df:43:4f:e1:bd:73:99:29:b2:
f7:8b:fe:0d:1e:72:27:bb:af:0b:2d:69:e9:25:a8:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7F:94:9C:71:10:EA:7B:63:88:C2:6B:72:B5:93:57:80:7C:7E:B2
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:61:47:ba:81:e3:d6:21:2e:15:f8:54:6b:e1:14:a7:77:
00:73:0a:91:ab:9f:ed:52:12:d4:7a:ee:4a:13:93:aa:73:5d:
5e:b5:67:49:3a:a7:0a:ae:6f:94:a1:6e:8d:f7:2a:ee:18:1b:
67:ea:ac:cc:ee:82:5d:aa:bc:82:d8:23:ac:47:cb:a8:24:68:
35:f2:b7:c6:74:7e:c8:dc:44:5d:bf:d0:5c:1d:ea:fe:2b:80:
18:23:6b:a4:9c:f8:c0:b7:3c:ba:02:cd:74:17:19:30:86:fe:
b8:42:d0:be:8a:cb:7a:41:0e:46:3d:83:b1:d9:a0:42:ca:b6:
c3:f3:08:29:ff:34:03:cc:76:2c:92:26:be:cd:e4:9f:61:75:
b0:b2:a5:59:b1:2a:52:48:79:9e:04:d2:80:0d:16:6d:78:af:
93:4a:66:7a:21:27:40:25:0f:37:7f:f2:e1:92:b1:1f:89:17:
e8:db:c1:4d:91:42:69:e0:98:34:77:89:40:81:ce:3b:68:3f:
d1:ba:24:61:8d:d2:6b:b4:ef:73:4d:78:0e:2e:af:6b:3c:5d:
41:5a:44:20:2b:ef:f5:8d:06:c6:e9:ce:40:81:92:e7:e6:f9:
24:ee:d3:73:2e:42:f7:cf:82:08:38:9a:b0:15:57:7d:31:71:
57:d6:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:15 2025 by rpki-client