Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: 3GIFTEOMjDXQzMfS1ZeVokpbE9RWOoUNOjqBawmLutU=
Subject key identifier: 12:D0:D3:7B:BF:E8:91:2A:2C:B7:7F:B5:2C:5A:2D:26:7E:B7:BB:7D
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01983D60BA0936C207474322685AF4E73347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 158E
Signing time: Thu 24 Jul 2025 17:00:05 +0000
Manifest this update: Thu 24 Jul 2025 17:00:05 +0000
Manifest next update: Fri 25 Jul 2025 17:00:05 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: WXAXqU+WEVVtQUQQrdM+FQhp+eUY0/G0K1xhIW1Eou8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:ba:09:36:c2:07:47:43:22:68:5a:f4:e7:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jul 24 17:00:05 2025 GMT
Not After : Jul 25 17:00:05 2025 GMT
Subject: CN=12d0d37bbfe8912a2cb77fb52c5a2d267eb7bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:38:f7:31:9e:82:8f:d5:73:5d:e9:05:69:
0f:95:3d:d7:21:c8:86:de:59:cc:a7:c0:06:09:9a:
6a:9c:8f:5c:da:ae:8e:c3:81:b5:e9:ef:8d:52:a4:
05:9d:25:7d:57:84:53:20:19:e7:b8:b0:a2:71:38:
dd:4d:05:04:2c:a7:af:23:b3:1c:ec:0d:49:fc:93:
02:e0:b3:a4:b7:cf:4f:3a:e2:17:bf:15:2b:1d:16:
ca:b6:df:6c:27:4d:fc:c4:98:47:5b:3f:32:5f:79:
45:6e:a6:3c:c8:11:20:ba:8a:71:c8:51:6e:41:89:
84:6d:28:8a:88:ec:e3:4c:99:35:b4:47:ee:50:57:
29:6d:5a:10:85:68:d3:c0:8b:e0:42:38:86:8e:0f:
d5:9a:bc:41:41:f2:95:f7:e4:d0:a3:18:72:43:1e:
42:48:2b:d9:24:c1:4f:ab:54:f1:7d:08:f3:08:4a:
bc:51:af:3c:bc:b1:99:d5:a4:07:2b:8d:4d:66:b2:
4f:f8:98:5d:16:bf:41:ce:22:c2:b2:07:62:79:ae:
1b:b2:51:a6:93:60:0f:68:81:02:20:91:14:b8:b2:
6a:f6:c5:bf:0c:86:9a:3c:e7:97:0e:05:d2:ba:a5:
32:38:d7:c7:9e:8f:ad:55:d4:2e:6e:a8:85:88:62:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:D3:7B:BF:E8:91:2A:2C:B7:7F:B5:2C:5A:2D:26:7E:B7:BB:7D
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:65:eb:55:07:08:5b:6d:4e:fe:79:29:50:d9:db:5a:5e:
da:44:70:f6:f7:84:96:89:df:ad:ed:5d:0a:bd:80:78:ee:71:
87:8d:de:d7:66:ae:a1:97:42:28:a3:ee:89:fa:6e:fd:08:d9:
ad:f2:25:c2:65:28:e3:47:86:3c:22:b1:32:08:1e:f7:f8:a2:
f6:cc:f7:e6:37:d8:ba:d4:2f:8e:16:bb:0c:71:3e:34:be:ec:
56:dd:16:d8:be:57:8c:13:8a:5e:1c:a3:c3:82:b5:e6:cc:1b:
10:ee:77:85:69:d7:2c:b8:99:c8:e7:0f:51:cc:bb:6c:57:a9:
c7:61:25:ec:be:d3:74:8b:29:d2:aa:83:d5:40:d7:82:5f:b8:
47:c9:85:57:1d:46:ed:da:00:da:12:17:1a:5a:4e:c1:25:95:
c5:8c:df:74:eb:70:2b:d8:e9:3d:04:4e:33:72:26:1e:4d:7a:
e2:a3:e1:c2:38:56:8e:57:b5:6a:4c:be:e1:3e:bd:fe:d4:d3:
30:50:9c:a1:76:35:60:4a:97:7c:90:60:65:d2:14:ad:7d:a1:
81:c3:cd:e8:82:8c:88:61:d0:55:90:37:6b:47:cb:dc:c2:f9:
f4:7e:67:0a:1e:92:ad:b8:ca:f9:11:91:9a:43:a4:e6:2a:00:
88:a9:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:51:41 2025 by rpki-client