Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: 2xIM4SZK1Wx3lb+z8jnphFu33Rql5vMjDxdyHR/ate0=
Subject key identifier: 2B:B3:8E:6B:20:7E:1B:3E:2C:58:F9:BD:18:5C:5D:26:CA:61:20:63
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 01985344747F9AEAD14185ABB2689797889B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 134D
Signing time: Mon 28 Jul 2025 23:00:51 +0000
Manifest this update: Mon 28 Jul 2025 23:00:51 +0000
Manifest next update: Tue 29 Jul 2025 23:00:51 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: a65dQT86E60ujoEsJu/9s0OUtQNU4r7P7JEKY1XsJ3E=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:74:7f:9a:ea:d1:41:85:ab:b2:68:97:97:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Jul 28 23:00:51 2025 GMT
Not After : Jul 29 23:00:51 2025 GMT
Subject: CN=2bb38e6b207e1b3e2c58f9bd185c5d26ca612063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:ee:70:48:29:d0:50:8e:c8:57:dc:85:4f:
69:41:4a:de:ce:9b:00:22:f5:4f:6f:1d:29:ba:f2:
23:c9:a2:18:0a:c3:d6:0c:10:bb:8c:29:d8:cc:24:
c2:3d:90:c3:83:e7:60:4f:e1:eb:60:4f:64:39:ce:
55:62:2b:a0:7d:1c:04:92:cb:49:32:12:0b:3d:c5:
ce:09:3b:66:33:73:af:65:b7:f5:01:40:39:5b:ae:
82:72:0c:03:72:cb:aa:f8:c6:56:1d:ff:95:cf:c5:
d3:51:09:f9:28:d7:7f:3c:cf:cb:ce:94:ed:40:e2:
f1:c0:cc:91:75:e0:81:48:1e:5e:7e:7a:5c:b3:5b:
4f:49:e0:f0:9b:b7:eb:36:ac:5d:e1:d5:58:a5:34:
5f:45:08:62:5b:37:0f:20:96:2b:32:87:26:3e:da:
f0:07:eb:d7:66:43:ac:66:9a:78:0f:af:72:87:5f:
ac:21:18:64:70:5f:98:d2:02:ad:13:14:f2:5c:23:
fc:dc:15:f0:0c:a1:6a:89:77:b0:fa:ef:b1:4f:98:
8f:d2:09:cc:51:3e:37:06:ca:a2:cd:e4:03:f1:95:
71:4e:36:ee:23:6e:f1:bb:0e:e6:25:7f:42:6c:de:
5f:35:72:26:ca:f4:5b:a2:25:38:6e:1e:ea:70:ce:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:8E:6B:20:7E:1B:3E:2C:58:F9:BD:18:5C:5D:26:CA:61:20:63
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:1b:cd:dc:dc:bf:66:24:b4:fa:7c:8c:cf:9e:b9:ab:77:
ff:d3:0f:28:c3:43:a1:c5:91:ff:41:de:1e:cb:8e:db:97:1c:
f8:0d:d9:90:9a:c6:54:d2:21:aa:6e:5a:06:58:1d:9d:b8:f5:
a8:87:d6:90:71:b8:9d:eb:fd:91:db:c9:ae:ae:04:17:03:9a:
71:c5:0d:57:41:94:65:2e:90:75:0a:29:ce:68:26:3e:e8:c5:
84:83:40:6d:66:57:28:0f:ed:83:5f:f1:c9:b8:dd:28:b3:b1:
76:6e:95:5d:06:31:9d:d8:6b:12:63:30:8c:52:15:27:e7:8a:
f9:b2:5d:88:ff:8b:4c:a4:3a:21:32:40:91:5e:8c:6b:ea:a8:
33:be:1a:db:18:1a:04:e9:78:3c:dd:f7:3e:0f:2e:f5:94:e7:
56:c7:f5:3d:be:c2:c7:0e:61:09:47:95:bb:d2:16:d2:49:c3:
e2:31:7e:28:7a:f2:07:bf:67:53:b6:04:7e:f8:f2:7a:2c:9f:
86:0b:50:b0:ac:43:79:fa:c8:75:ab:88:1a:b3:9c:57:a6:fa:
47:4c:da:04:6d:8b:5b:80:90:4c:2a:69:67:ba:f6:a8:0f:f5:
a1:79:83:9c:2a:e0:56:47:99:be:8c:2e:46:11:19:96:cf:f4:
bf:39:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:20 2025 by rpki-client