Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: Lo69aT/qpOCMRtuAP/VPvqUlWY21e2VWp9a7l/WzTPI=
Subject key identifier: 24:85:C5:FC:5D:EC:C7:AC:F5:81:2F:C6:2B:1F:5A:53:7D:65:C5:9F
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01984A77E08F75F28F6D5EA4B506F74455DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0D46
Signing time: Sun 27 Jul 2025 06:00:26 +0000
Manifest this update: Sun 27 Jul 2025 06:00:26 +0000
Manifest next update: Mon 28 Jul 2025 06:00:26 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: Yb3SbJ6sv/N3xlXQ/YGDu5oIN3AbZVi56lpfUGI2tpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:e0:8f:75:f2:8f:6d:5e:a4:b5:06:f7:44:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jul 27 06:00:26 2025 GMT
Not After : Jul 28 06:00:26 2025 GMT
Subject: CN=2485c5fc5decc7acf5812fc62b1f5a537d65c59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:7c:a7:f3:31:7f:5e:35:b7:8c:05:01:cb:
d8:03:77:33:d7:25:63:eb:c0:6f:a1:fe:6d:8d:9d:
54:9b:3c:3b:bb:be:93:20:a6:7a:d1:78:6c:b3:d3:
84:38:d8:7f:db:e1:a1:af:74:c4:f8:2f:50:cf:ad:
87:ea:99:0a:f3:d2:60:91:1b:be:17:cc:b9:a7:0f:
b2:ae:8f:35:2a:19:8d:30:9c:0e:83:98:00:01:9c:
e9:33:ef:13:80:11:d4:df:91:01:d8:e1:44:ad:40:
4c:b6:f5:38:24:df:7b:94:11:c9:87:e0:3a:f7:cb:
e9:7b:5f:d8:b9:8a:cb:99:b5:e0:fc:e1:e4:1a:23:
c9:b5:46:ee:bb:7f:d6:a2:86:79:da:42:02:a8:fa:
5d:99:66:e7:b6:c6:88:81:1b:3f:80:ba:72:bb:43:
8f:79:81:f8:aa:ad:8d:a4:a0:27:12:71:90:73:ed:
d9:ea:3c:d0:10:9a:9e:22:3a:1c:07:ca:1f:4d:90:
dd:0f:7e:02:1e:4a:a9:89:97:c7:22:3e:35:04:f7:
d9:e2:af:3a:97:d8:2a:35:9c:84:60:b1:88:63:b0:
3b:2b:8a:ff:d9:5c:a9:e7:c6:f0:6e:4c:68:8e:29:
20:1f:a0:17:c0:33:90:02:e1:a1:02:7b:24:5d:b8:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:C5:FC:5D:EC:C7:AC:F5:81:2F:C6:2B:1F:5A:53:7D:65:C5:9F
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:d6:e0:72:cc:35:d7:50:1e:e7:2c:95:55:db:1b:b5:de:
35:85:11:b8:34:e8:a8:d2:00:87:a1:1e:9c:ce:3d:12:df:95:
61:40:8d:e9:3d:0f:70:27:84:a2:54:f6:b1:72:c2:06:55:92:
a1:63:f9:74:3e:01:df:dc:96:6e:2c:7e:cb:0d:45:6c:b1:bd:
1a:b4:42:e3:2a:6a:f5:a1:23:47:b8:9c:5c:d5:39:10:ca:54:
7e:3b:32:d0:65:fc:d3:da:35:55:2f:44:a0:65:66:f5:ea:e1:
c4:ee:cc:d7:f7:a4:18:74:a1:f5:f5:fa:a1:5e:48:c4:5c:06:
10:f7:ce:95:93:ad:c7:d0:00:48:ec:4f:95:eb:2c:45:02:46:
da:c0:aa:2d:b8:b1:e1:46:73:5c:3c:9c:73:03:78:64:49:55:
60:10:f5:7a:46:04:ca:46:21:6c:d8:6f:6e:44:4e:b7:6b:79:
63:87:e4:ee:ce:1f:ba:42:0a:8a:dd:15:4f:e6:dc:d5:bd:14:
50:4a:6c:af:ca:f0:d3:ca:3f:bf:58:43:b0:f4:60:be:c1:e2:
3d:c4:b3:b7:7c:ac:34:45:09:3f:6a:4b:aa:99:bd:93:c3:82:
7d:6f:85:3d:8d:48:61:21:f5:bf:54:3c:b1:fb:d9:64:f2:8c:
77:2b:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:50:36 2025 by rpki-client