Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: 2L4WyM4JAiYmyRGVmXEw6lOeX/cMM/Wtr1xUt1hZayM=
Subject key identifier: 79:3F:87:C0:99:72:31:DC:B3:E2:28:1A:F9:7C:87:36:2D:B8:10:60
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01983D2A57E7D4285413C0F292E332F8D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 160B
Signing time: Thu 24 Jul 2025 16:00:41 +0000
Manifest this update: Thu 24 Jul 2025 16:00:41 +0000
Manifest next update: Fri 25 Jul 2025 16:00:41 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: 7sgM8jQey0hzU8RbkK0fpr8zuWE.roa (hash: gY/oXRN1rQWRXTj4ibW7nW6LN4SdHlM7BLUYysL1ewo=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 3F/8P6jfNrkkfMYjIrPFU4uHqqn6aeHNWtfcRRamYRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:2a:57:e7:d4:28:54:13:c0:f2:92:e3:32:f8:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 24 16:00:41 2025 GMT
Not After : Jul 25 16:00:41 2025 GMT
Subject: CN=793f87c0997231dcb3e2281af97c87362db81060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:6d:ac:96:54:ec:d4:39:79:34:a4:49:e1:
51:6b:58:e3:3d:ef:12:d0:75:3f:dd:e2:52:27:bf:
54:62:03:31:9d:d0:a6:39:e0:d7:fe:70:d8:e2:8e:
1f:ba:0a:e6:bb:a1:f1:24:04:ad:29:f3:24:a7:58:
f9:d1:99:9d:7b:f0:c8:99:36:f3:0b:6e:e5:65:dd:
0a:6d:06:ea:36:07:3a:5a:06:5e:e4:64:09:09:01:
af:e6:d2:35:2e:d2:92:36:5a:a4:57:54:ec:00:45:
bc:12:cc:79:d5:96:ad:e7:bd:57:4b:d9:0c:f8:ee:
41:66:ab:d6:c1:55:94:92:f8:b9:a0:3d:ef:a7:b1:
56:25:28:e8:22:55:e5:2c:ef:cf:1c:ed:e2:c4:ef:
57:1c:bb:c8:6b:5d:36:f9:2b:df:0d:28:dc:ce:ca:
72:44:20:03:5f:ab:60:c9:21:08:9b:dc:3e:9f:4d:
21:f8:f3:55:44:10:c4:72:8a:f8:22:32:be:0e:20:
59:51:00:d8:0e:3b:a4:ec:95:26:50:ca:42:76:18:
e3:17:8c:41:05:37:15:c4:37:a4:e2:14:a3:7b:fd:
1f:fb:72:eb:71:ac:09:a4:e4:b5:c7:fc:25:8c:73:
13:a5:0a:63:cd:01:8a:50:5b:92:01:2a:48:eb:1a:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:87:C0:99:72:31:DC:B3:E2:28:1A:F9:7C:87:36:2D:B8:10:60
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:9f:24:4f:a3:07:ac:b6:bd:d7:2f:c7:3a:80:0a:f8:42:
07:e4:50:21:f8:6d:f4:e0:21:4f:51:84:54:40:5f:ef:24:65:
82:99:68:7c:b6:f5:1f:94:dd:88:fb:30:2f:da:1b:d1:79:68:
aa:a7:4a:b6:ad:54:9a:fa:e4:41:46:ff:88:b6:e0:12:c6:b3:
0d:15:2f:02:82:d9:91:c6:2a:5b:11:5e:50:b8:8d:72:b0:4f:
8a:4a:52:c7:c0:7a:87:f1:eb:5a:84:33:4d:0c:99:5f:ce:39:
61:88:7e:36:4f:8c:67:67:da:d8:04:f4:38:65:a5:58:3b:d4:
fb:cc:1a:92:55:06:30:7f:70:3c:2a:02:31:e7:a8:e8:00:1e:
2e:3e:ad:8c:22:25:64:bb:b2:1d:3d:dc:00:b4:9b:eb:44:ea:
3f:9c:8c:a1:4f:f6:3b:6c:e4:8e:87:7d:48:d9:91:b2:bf:b2:
ea:36:a2:58:95:40:cb:8b:d0:ab:45:46:b2:83:53:37:22:fa:
95:fb:76:da:86:0e:d3:ce:ea:8b:d5:2b:54:d1:51:f5:4d:1b:
cd:c8:84:ce:a8:df:5c:d8:43:8d:9f:b2:1e:ad:83:3b:aa:ce:
44:21:fc:25:bb:5b:81:a0:99:1e:5f:ca:48:6b:dc:e1:84:d5:
6d:53:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:41:26 2025 by rpki-client