Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: TigwYB9Jrg9x2jwl5tT9DbcGN/0APL/PEs6ZnPTx9Hw=
Subject key identifier: CD:04:B5:F7:40:51:A5:13:11:CF:84:23:4C:2A:CB:4F:99:14:A9:B2
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01984B8A788E5527F453DF955929342A7830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0AAC
Signing time: Sun 27 Jul 2025 11:00:22 +0000
Manifest this update: Sun 27 Jul 2025 11:00:22 +0000
Manifest next update: Mon 28 Jul 2025 11:00:22 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 1/x9Vy3gFDyW1STYuDNUO63J6nyni2+Qxy81PhEEt3M=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:78:8e:55:27:f4:53:df:95:59:29:34:2a:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jul 27 11:00:22 2025 GMT
Not After : Jul 28 11:00:22 2025 GMT
Subject: CN=cd04b5f74051a51311cf84234c2acb4f9914a9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:1f:bb:4b:d1:73:78:82:49:15:af:a1:83:
62:e6:7f:10:12:1b:4c:0b:cd:f4:bf:7e:4e:13:95:
eb:fc:1b:8c:2e:fa:80:fd:49:2d:e7:59:3a:04:a9:
6d:27:a8:ba:28:11:82:0e:3c:de:f9:13:4f:fd:5f:
61:27:f3:ad:d6:3f:3c:95:15:5d:63:34:96:85:a8:
33:e8:ab:92:a3:8c:84:ad:12:d1:e7:a7:10:f3:fd:
0c:d6:b6:de:c5:51:32:75:1e:d0:42:69:64:f5:16:
0b:ca:ce:3b:d5:60:4f:4c:b5:83:26:d9:67:f2:1b:
c8:41:b6:c2:a1:ae:c5:c7:7d:ef:91:60:96:4a:f0:
7d:2f:44:45:2b:e0:cd:2b:6a:4f:7e:bc:50:f4:1e:
08:eb:cf:c1:b6:64:bb:c1:b3:03:67:19:6f:98:24:
10:9a:29:3a:a4:e1:0f:61:8b:6c:18:6a:bd:80:a2:
a6:7d:78:a3:32:ce:0a:f9:fd:ee:a9:0a:11:d5:36:
b6:c7:72:26:3d:19:31:d7:c4:42:80:4a:a9:4b:ff:
75:79:ad:61:18:b4:2f:b8:bf:0b:fb:f2:1b:31:f2:
cf:ad:fe:ad:53:21:76:99:39:27:5f:8c:5e:ff:93:
42:b9:44:02:68:45:9e:8d:99:17:6f:49:18:8b:8b:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:B5:F7:40:51:A5:13:11:CF:84:23:4C:2A:CB:4F:99:14:A9:B2
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2e:aa:db:dd:fe:32:dd:fd:d9:fc:29:a1:29:09:f3:98:d8:
5a:36:06:64:ad:41:31:7e:dc:bc:87:c8:1f:9c:b6:f5:aa:32:
6c:c7:5d:f7:36:47:86:fc:82:4d:8a:7e:11:1c:b9:de:67:a3:
51:b3:af:48:bb:e6:d3:95:da:9f:cb:28:f4:61:e7:6a:e2:a1:
b8:eb:9a:3f:90:83:51:21:9d:12:26:e5:de:18:a4:e4:f4:ba:
61:b0:87:03:99:ed:a0:08:15:ad:f6:d9:d0:d6:9e:83:67:93:
c1:dc:9c:50:b7:61:ba:f7:36:42:28:38:6d:c6:84:8b:9b:45:
01:dc:87:ed:b6:d5:a4:41:ae:21:d2:42:17:cf:75:c5:33:8a:
d2:50:67:f1:13:2b:13:8d:e7:01:ed:b5:e4:aa:b2:cf:99:cd:
09:9a:63:ae:89:aa:c9:0d:24:c9:be:03:e6:68:d8:07:18:e0:
01:44:bc:03:1d:bc:d9:5d:d3:46:9b:58:db:f4:33:f7:dc:83:
74:be:c5:0e:24:62:83:f7:7a:9c:9b:81:29:7d:5b:aa:b0:07:
5b:7f:85:57:6d:3f:77:a2:bd:70:df:68:bd:66:33:50:9d:16:
4a:0e:bd:94:4f:c7:91:55:48:82:94:88:5f:c6:05:aa:b0:63:
ee:87:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:49:14 2025 by rpki-client