Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: VSGeL4hkNiVNglP8IkxOeFaJESSXF2/O4GT5eKMo0HY=
Subject key identifier: 86:3A:6C:F8:33:2D:8B:E4:8F:EF:1D:C2:2F:81:89:66:51:4B:2E:69
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019848F73473941E50B4CC0DDBA3F130768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0C50
Signing time: Sat 26 Jul 2025 23:00:17 +0000
Manifest this update: Sat 26 Jul 2025 23:00:17 +0000
Manifest next update: Sun 27 Jul 2025 23:00:17 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: JbubHp0P4DvYXkAjhSirrwRb/9y+nr2Q41NVgfejw1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:34:73:94:1e:50:b4:cc:0d:db:a3:f1:30:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jul 26 23:00:17 2025 GMT
Not After : Jul 27 23:00:17 2025 GMT
Subject: CN=863a6cf8332d8be48fef1dc22f818966514b2e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:5f:e6:70:63:9f:db:aa:b0:14:cc:c5:b7:
ab:6b:d2:ac:f7:e0:9a:4b:22:5e:96:22:73:cf:60:
38:5e:c8:f7:36:12:65:9e:40:80:34:f0:e9:8a:2c:
cb:3b:52:b5:d6:b8:fd:12:fd:55:fe:e2:c6:4f:ba:
51:c6:f3:ab:0a:29:7d:7b:b8:7a:f4:37:85:00:2d:
72:ac:4e:9a:9a:a4:e9:a4:87:17:67:a3:6d:97:0e:
b0:06:75:47:3d:9c:ee:05:5f:26:86:9a:2d:64:de:
bd:df:83:0d:00:72:13:38:cd:9d:61:d8:58:19:b8:
ed:f8:c6:0d:8c:34:b1:14:e1:a2:95:96:9d:84:ca:
fb:80:f8:d7:a2:26:eb:ee:3b:3a:56:9e:ab:83:62:
92:e0:95:c9:6c:c7:11:9a:96:67:9c:be:cf:34:5b:
e8:54:50:d2:9b:05:b4:34:95:ed:0e:10:44:57:9d:
d3:7f:d4:96:e4:45:12:0b:b2:a6:69:9e:d8:00:a3:
1a:4c:08:f0:81:20:81:a4:22:d7:9c:88:80:e9:99:
ba:65:09:33:44:e0:b0:aa:8e:27:65:d8:13:2b:ab:
ca:d8:c4:ed:d4:3b:b2:95:e2:8d:d0:e7:de:c7:4e:
84:13:82:59:8d:65:66:0d:2b:d6:7f:74:7c:cc:55:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:6C:F8:33:2D:8B:E4:8F:EF:1D:C2:2F:81:89:66:51:4B:2E:69
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b1:8e:ca:61:1f:bd:2f:40:49:e6:2b:19:12:9b:59:c8:f9:
d7:e8:27:b9:21:15:a5:5b:cf:c9:9d:37:74:85:11:49:7b:a3:
60:fa:86:6b:66:a9:ec:71:84:69:e9:2f:b1:5f:84:4a:eb:05:
f9:17:ea:59:05:66:b6:94:86:27:c4:5e:6e:a8:cf:24:cd:57:
5e:8d:ce:2e:71:83:d0:a5:cc:08:51:7d:dd:cf:f9:69:55:0d:
28:9c:fd:45:aa:16:0b:c6:b9:10:0f:51:28:f5:ea:25:04:c3:
1d:14:69:a7:94:9f:9f:97:a0:58:85:df:6c:bf:67:3d:03:a7:
a1:6f:90:c6:31:db:98:4a:35:22:e4:e5:29:5f:97:7a:7d:22:
3f:8b:ed:40:0a:8d:d4:5c:4b:a7:dc:f0:2f:60:32:b4:95:ef:
fa:6a:38:ad:b3:a1:d0:6f:c1:7a:6e:1f:63:74:7c:57:6b:d0:
f8:08:3f:83:be:1a:af:b4:62:c5:32:a3:02:30:ff:51:96:ee:
a6:73:2c:71:e0:12:f9:66:8b:e9:2f:82:ef:f8:5d:81:8c:f7:
e9:42:60:11:38:fb:62:a4:1d:3d:3c:5a:47:af:23:f9:fc:fa:
91:7d:43:b5:ce:0b:3a:88:47:52:93:66:92:02:9f:fc:71:56:
e2:65:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:21 2025 by rpki-client