Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: HNrAsUQVP4l/EVK5ImpkS6vCXJmOVhrLReiX3fw0jCA=
Subject key identifier: 36:F1:B0:6B:33:15:37:39:58:31:B3:D9:8D:F4:CA:71:93:79:41:A6
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 0198277EA2059227890460AC8E7E8047EB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 95
Signing time: Sun 20 Jul 2025 11:01:07 +0000
Manifest this update: Sun 20 Jul 2025 11:01:07 +0000
Manifest next update: Mon 21 Jul 2025 11:01:07 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: h+KtYUBTcz6qeBFr0zcprQn9hDNWCK7HJ+iy5ql2P7k=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:a2:05:92:27:89:04:60:ac:8e:7e:80:47:eb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Jul 20 11:01:07 2025 GMT
Not After : Jul 21 11:01:07 2025 GMT
Subject: CN=36f1b06b331537395831b3d98df4ca71937941a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:b4:d3:14:06:f8:c1:c9:ab:d4:28:37:84:
73:2e:1a:3b:9f:e6:bf:db:64:80:64:7a:8f:cc:34:
58:f3:e6:a5:e6:da:1c:a5:89:0c:57:55:5b:8d:83:
74:db:6b:bd:cb:1a:f7:62:0f:cc:ab:b8:7f:38:04:
17:73:0e:7f:64:df:61:bb:64:67:b8:9e:d1:ad:90:
5b:0f:98:d9:c9:8e:7e:0d:63:16:76:65:ed:f5:16:
b5:e2:c8:60:7f:31:1a:5c:4e:c2:a2:bb:c7:b7:68:
8d:91:c1:61:f0:52:d3:ab:ea:d8:e3:61:49:42:79:
ff:ed:1e:27:c8:45:43:ad:cf:e3:49:90:b3:33:99:
a0:bd:7d:d8:35:4e:e1:f4:77:47:74:90:6e:80:67:
64:51:e6:ff:72:d4:28:47:7d:f6:56:3a:85:24:f1:
7d:6c:53:09:0b:7e:fc:f7:c9:3d:fa:80:26:b7:7d:
c5:51:36:8a:6a:6c:27:60:c1:92:6c:71:22:1a:88:
f3:3e:c7:c7:c2:a6:72:98:4a:f0:72:af:93:1e:83:
bd:b3:c4:57:fb:03:34:06:ae:de:98:04:f6:53:d3:
f2:13:ba:c7:9d:f3:ab:05:ce:5f:06:10:64:7d:68:
dc:ff:aa:e7:57:3f:bf:f4:10:04:0a:00:f0:f4:d4:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:B0:6B:33:15:37:39:58:31:B3:D9:8D:F4:CA:71:93:79:41:A6
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:39:1f:cd:ca:2c:af:a9:2a:e2:e1:5c:30:6f:d9:9d:68:
cb:94:1d:e0:2f:ca:7f:6d:8f:11:e2:51:96:50:a4:ba:8b:2e:
0b:4f:bb:61:03:0b:19:4b:49:8d:cd:ba:3c:5d:cf:3d:7b:cc:
ef:eb:c6:99:cd:47:63:98:94:10:77:8f:7f:70:94:ea:45:4d:
3a:75:d5:8a:0b:d1:b1:e9:c0:8d:b7:a2:0b:6c:88:0b:ad:08:
20:1e:2c:0c:c2:61:07:53:65:6d:f1:8d:94:86:86:7a:0f:cd:
fc:c1:22:c0:07:0d:02:5a:74:8e:78:f6:8e:2e:ac:7a:77:08:
b3:66:35:93:33:aa:c4:58:5a:fb:43:3d:ac:21:66:38:88:dc:
5d:df:e4:ee:0b:ae:fe:96:a1:46:a5:22:13:92:00:73:21:a9:
96:a5:e5:b0:9c:05:56:37:90:81:fe:59:f4:e0:3d:7f:f0:5b:
09:b0:b2:11:8c:50:5d:75:ff:25:78:0f:83:d0:ca:7a:f9:de:
75:6b:82:8b:67:36:03:60:e8:2c:64:04:07:ad:c1:16:4c:a1:
a1:19:f9:f0:33:9b:d0:7d:4b:aa:5d:06:ef:1d:2f:24:04:1a:
66:64:e8:4b:95:eb:be:32:b6:d8:3d:40:5a:b9:bf:e3:65:ad:
9f:1c:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:26 2025 by rpki-client