Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: yUGmhs4L9Xczb6ZQu8WvbCkGFpSGqEw1dk2yjLySgHQ=
Subject key identifier: 67:88:99:83:60:AB:2B:D6:EE:B4:1D:4A:5C:41:1A:87:06:BE:19:A9
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0198560E705A8C453F26345BB060CEA04CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 12:00:43 +0000
Manifest this update: Tue 29 Jul 2025 12:00:43 +0000
Manifest next update: Wed 30 Jul 2025 12:00:43 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: +BCeGNX8yCzHLJ6L8b9xiGtwCaDy5SzWz/ss3L41AhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:70:5a:8c:45:3f:26:34:5b:b0:60:ce:a0:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Jul 29 12:00:43 2025 GMT
Not After : Jul 30 12:00:43 2025 GMT
Subject: CN=6788998360ab2bd6eeb41d4a5c411a8706be19a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:76:1f:d8:be:dd:dd:31:b4:76:c5:c9:0d:
33:76:00:10:de:7d:70:c7:0d:b3:c5:c1:23:c4:de:
67:b3:40:9e:e9:9d:91:97:c5:20:cc:4a:7e:3d:ef:
fa:2b:68:2a:3d:5a:a4:5e:c5:21:d6:88:70:e1:2f:
7e:47:e1:2c:fa:83:27:18:2c:fe:82:c5:1d:83:cc:
00:10:93:db:7f:10:48:1b:27:b0:7f:12:0b:b2:7d:
29:8a:3b:be:e6:f5:fc:0c:d0:2b:6e:49:7f:9d:ca:
88:1c:55:54:bc:e1:09:8e:cd:8e:4d:2f:34:cf:40:
4b:e4:1d:9a:88:71:7f:b2:7e:7f:b2:9a:35:12:ee:
d8:ce:fc:ea:dd:8f:39:f9:8a:1f:24:a3:8c:fa:2f:
e4:a0:10:f7:ff:8e:22:23:e8:91:14:dd:c9:07:4e:
57:99:44:ff:e5:9f:8a:3a:73:ab:c3:80:9b:a4:0c:
c2:2d:5f:42:8e:e1:af:cb:c2:12:0b:d5:89:e1:74:
f2:0a:a2:d9:ef:9f:cd:a9:f9:ad:d9:0a:0d:e1:20:
ed:81:f5:c3:1a:c9:df:ad:ef:44:1d:3b:bd:f1:a8:
39:e0:42:94:c6:7b:62:10:9b:5c:5e:b6:31:b0:2d:
c7:b5:4a:69:8e:74:8f:eb:d2:0c:70:25:b1:3e:bd:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:99:83:60:AB:2B:D6:EE:B4:1D:4A:5C:41:1A:87:06:BE:19:A9
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:fa:48:72:54:b8:40:3e:a8:37:5f:10:2f:7a:6b:cd:f7:
7d:19:37:82:1f:4b:12:44:c6:4b:cf:bd:09:44:80:9a:cb:b2:
56:b4:0f:b6:d2:1f:e0:75:86:67:a9:71:b3:56:ef:ff:7e:44:
86:9e:92:31:66:1b:de:fd:9d:25:77:5b:ea:46:e6:83:f3:06:
19:b0:cf:4e:3a:f0:f8:91:9d:58:d0:8d:db:f8:cc:e1:2f:fb:
98:6d:16:51:2d:50:07:0f:a6:e8:c4:05:12:dc:bc:8e:25:ac:
2e:71:ee:55:84:f3:69:da:46:73:ec:e4:02:0f:50:81:05:07:
c6:85:bc:1c:78:3c:4c:7d:0c:a4:38:d9:85:94:3e:c1:22:fd:
4b:10:0d:e6:df:37:36:14:45:12:76:3d:2b:95:1f:1c:b3:14:
83:05:13:6b:59:24:e5:bc:a5:20:ca:79:80:1e:e9:60:97:80:
1a:b5:6d:4c:0e:96:2c:13:50:d5:b1:00:d5:b1:fd:1b:d0:48:
53:57:97:a6:df:31:38:88:a9:bf:50:04:81:43:0b:c0:06:26:
1c:2b:12:3c:a3:7e:d8:e4:f2:0c:2d:8a:44:56:91:4f:5f:2b:
46:1d:d9:ea:7d:aa:3f:86:4e:c0:09:f8:a5:24:d4:aa:f1:97:
41:5c:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:36 2025 by rpki-client