Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: lbU/jw1oCBJROZc4sWQ6gaXRY6/r5LKYGEQ1rIAhtYc=
Subject key identifier: 66:A6:8E:14:A7:E1:D6:ED:AF:3E:28:CE:9E:2F:93:A3:C5:CE:EC:DD
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01984966A4925E7795A791FA5D2090B18AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0A07
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: /LCfYlaucmgwz60LvW6QtL1/HymVGa4tRHZdSyjFEeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a4:92:5e:77:95:a7:91:fa:5d:20:90:b1:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=66a68e14a7e1d6edaf3e28ce9e2f93a3c5ceecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:b2:b2:8a:7f:58:8e:3f:c4:3c:d0:a0:d5:
22:c1:0b:9e:f5:89:ba:e9:59:4b:4e:cd:0c:ad:99:
fa:c4:a9:e8:0c:2d:fc:64:ab:76:01:22:06:e4:27:
00:25:01:f1:5f:52:2e:3d:37:fd:18:12:a3:ea:25:
14:4e:99:5c:09:f6:c9:76:79:44:e9:df:57:66:8c:
1b:5b:50:e9:df:b5:d1:97:36:13:d4:3b:22:8b:5b:
d2:7b:06:fc:20:57:f8:0f:4d:e0:4b:72:76:9d:dc:
0b:31:55:0c:d6:98:eb:56:33:d6:b2:40:dc:5f:18:
15:a4:32:f1:e8:ae:26:70:9f:22:07:21:fa:5f:97:
eb:27:00:a8:cf:a3:ae:43:3f:db:03:ca:36:b7:00:
71:8a:28:08:6d:5b:50:9a:7b:cc:22:d3:38:97:b0:
23:af:23:31:78:1c:ad:87:4e:59:41:b8:a5:05:65:
ca:7a:ea:70:2b:0a:06:aa:22:d7:65:75:bc:7b:95:
d5:4d:9e:ae:40:18:e4:51:9d:d2:7b:c8:54:58:7b:
c1:60:44:52:20:81:58:8e:0e:38:c9:7a:43:35:58:
19:b9:7b:77:9b:1b:c2:5d:45:39:38:ae:2a:23:87:
b2:a5:8a:d1:c9:2c:1a:10:26:52:a9:9a:81:ac:e4:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:8E:14:A7:E1:D6:ED:AF:3E:28:CE:9E:2F:93:A3:C5:CE:EC:DD
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fc:d3:06:76:91:1e:6a:c9:c4:a7:bc:46:c0:24:dc:4b:e1:
12:75:6e:f0:a1:9a:45:6c:bd:08:a5:9c:dc:ba:50:ff:4f:6e:
f2:43:c9:9d:19:b7:80:73:a2:81:ba:a4:93:b5:55:2f:b6:f2:
61:96:98:5c:94:19:48:a8:01:bb:7f:28:44:8f:b2:42:6c:c2:
ec:cc:60:7d:65:85:9b:5c:47:1d:6c:01:92:0a:3a:d0:87:fc:
04:8c:94:7b:27:2f:ee:cb:c0:f9:12:ba:a2:45:e8:98:59:b7:
9a:73:6d:27:85:4e:b8:50:9a:5c:82:6f:c8:a3:b2:32:df:ae:
30:19:5d:9d:5a:e8:c1:b5:61:b0:ef:8e:ae:85:81:f8:91:0c:
a4:3f:65:fe:2a:35:25:c2:5f:c6:38:17:ef:23:cb:9c:75:a1:
73:94:1e:8b:44:aa:ea:47:f4:67:49:9d:e8:03:00:0b:ac:6e:
22:cf:79:03:4a:12:62:1d:55:d2:eb:f4:4c:0d:d1:88:4f:c2:
80:c1:41:a1:00:dd:87:14:9f:2b:0e:e9:4e:12:60:de:da:2e:
ab:31:17:c5:cf:5d:c2:53:16:67:b6:1f:81:61:74:c3:97:dc:
ff:a6:65:fc:bc:86:41:07:cd:c5:c5:e2:0c:3b:d1:67:78:cf:
5a:04:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:57 2025 by rpki-client