Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: Izr+Vl9QQ/Kq/RB8EQ44N6sPuJ4/3Bd9vWQFV6BjEiI=
Subject key identifier: D4:B2:23:B6:E1:F4:65:CD:EC:25:F7:11:D7:9C:99:8A:68:22:67:26
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 01985C10EBD0B1D3EF9586D83EF7CD222DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 0FAB
Signing time: Wed 30 Jul 2025 16:01:09 +0000
Manifest this update: Wed 30 Jul 2025 16:01:09 +0000
Manifest next update: Thu 31 Jul 2025 16:01:09 +0000
Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: aUZzxajfh0PGFza02CToJprJ/hSW6NL0UoAsEsMQ/qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:10:eb:d0:b1:d3:ef:95:86:d8:3e:f7:cd:22:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Jul 30 16:01:09 2025 GMT
Not After : Jul 31 16:01:09 2025 GMT
Subject: CN=d4b223b6e1f465cdec25f711d79c998a68226726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:16:87:83:e2:8a:3a:b5:82:44:ca:9b:6e:
6c:8a:62:7b:99:27:65:5e:63:44:c3:8c:be:a5:43:
19:74:3a:de:a3:c6:4a:69:3f:5a:5d:57:ea:b1:9d:
39:64:fd:c7:60:5b:1f:90:c3:1e:2d:22:8c:ad:df:
26:ff:46:31:ad:28:1d:de:1d:d7:1a:95:67:e8:8c:
b5:e2:31:8a:0d:f6:56:39:7e:01:ce:35:a1:c2:17:
23:29:ad:9f:1e:e0:35:1b:4c:68:30:7e:7d:ed:a5:
e3:a8:01:08:24:8a:2a:6c:f8:20:57:9f:ed:86:dc:
db:a4:92:0c:47:e2:d1:7a:ae:a8:98:7c:89:c5:f1:
28:bd:f7:1a:34:0b:b4:d0:8a:5e:4b:63:e9:aa:73:
15:94:2c:2c:e4:49:28:e6:dd:09:40:b2:54:24:3c:
df:71:8b:ee:36:d5:b1:fd:97:8d:80:68:27:2a:c8:
68:b9:1d:25:fe:05:ea:d2:d2:98:f5:66:90:9c:ec:
b5:79:73:5e:52:2e:9f:f8:77:e4:e2:99:c7:bb:d8:
1a:88:ec:61:87:78:ef:90:65:c5:a6:8c:43:fc:b7:
6f:cd:63:e8:78:5c:52:3a:06:e0:25:d6:d5:63:3d:
41:0b:3b:b6:2d:d8:ab:06:ce:72:4f:97:8d:f4:a8:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:23:B6:E1:F4:65:CD:EC:25:F7:11:D7:9C:99:8A:68:22:67:26
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d5:49:53:48:52:bb:75:db:58:41:be:d9:d3:32:a5:50:fe:
be:54:4a:e5:29:81:d4:0b:4c:4c:a2:ce:d2:7a:01:59:18:70:
30:43:cf:2e:e6:1d:d7:ab:40:d1:a1:1f:55:e8:dc:67:13:a2:
b3:a8:b8:8e:1e:b9:96:98:69:12:c2:45:ef:24:9b:40:23:1d:
33:cb:aa:fc:a0:fc:51:c2:b4:43:13:c5:0f:51:a1:e2:d2:3f:
43:fd:a4:9a:90:a1:54:83:9a:89:13:b6:79:cd:82:7d:67:6a:
a7:76:c1:f2:13:fb:c2:42:da:67:5e:e2:88:a4:56:6e:6a:14:
79:07:2e:a6:07:23:54:1a:62:4f:4b:90:9b:91:30:be:32:90:
99:2f:7c:9a:27:74:21:29:1d:98:64:19:dc:e5:03:09:c2:34:
8b:d4:b5:48:ef:f4:ee:c1:21:dd:36:fe:d4:31:c1:d0:7a:df:
be:f5:0d:e9:96:e4:dd:92:7a:11:a4:a5:82:e9:de:6f:ef:84:
3c:54:0b:5d:5b:92:a1:39:bf:02:a1:86:49:8d:23:32:8e:70:
43:12:ae:56:c3:8f:34:5d:a5:b4:50:fe:1e:38:e6:0c:59:65:
86:8b:9e:a9:de:cb:21:7d:1f:5c:42:61:c1:c1:16:f9:bc:75:
aa:e5:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:27:15 2025 by rpki-client