Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: ndEWjZK4Y5Ve3vwZcv3v/c72eDMvv24M12spywhg48A=
Subject key identifier: E3:51:16:C3:29:E2:2F:EA:A3:6F:97:46:F7:4D:B5:5B:0E:08:21:D7
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01984B8A6AFF4C9B8E5AB9F1CA321B200859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 135D
Signing time: Sun 27 Jul 2025 11:00:19 +0000
Manifest this update: Sun 27 Jul 2025 11:00:19 +0000
Manifest next update: Mon 28 Jul 2025 11:00:19 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: 2QegvGbO46Mu+pBfaEG/ZKEFyZFkYGLEtvuyXeAseoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:6a:ff:4c:9b:8e:5a:b9:f1:ca:32:1b:20:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jul 27 11:00:19 2025 GMT
Not After : Jul 28 11:00:19 2025 GMT
Subject: CN=e35116c329e22feaa36f9746f74db55b0e0821d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:52:fc:ec:7b:b7:55:32:02:d6:ba:0d:f4:
46:19:e9:03:91:27:09:5f:99:84:de:6a:40:6c:cf:
7b:3d:83:3e:fe:09:83:3a:6c:17:ed:6d:a6:e4:9a:
8a:a8:12:a2:51:31:1c:5d:9c:0c:af:d3:60:0d:95:
2b:8b:81:4e:c5:e6:17:f2:3b:2b:86:46:21:9c:a3:
61:31:76:7a:bd:da:73:e1:1f:17:1f:c4:31:46:a1:
a8:44:7c:69:b5:cd:f3:cd:65:1f:43:98:ab:96:1d:
9c:e8:14:6e:b2:cb:30:8c:d7:13:12:2e:60:cd:13:
0c:84:1f:3c:60:0b:fa:2a:53:e1:29:fc:12:e7:4b:
71:d1:e3:5b:73:a2:47:52:55:41:f5:00:2e:1e:70:
f8:fa:5c:2b:96:06:bb:6f:58:c3:3f:67:23:77:24:
71:10:db:8f:93:b7:e7:61:cc:e0:d7:16:91:4b:e6:
b4:fb:b0:f2:07:ce:77:6b:c1:0c:60:41:84:a7:8b:
03:ba:c1:e1:ae:09:ea:59:a0:a6:5a:8a:d1:cb:33:
eb:55:6d:64:83:49:94:2e:b5:4b:45:b3:2f:f4:ff:
21:48:09:91:14:50:77:cf:df:74:18:a8:ab:8d:5d:
66:48:7d:e5:68:cd:4e:e6:a7:d4:44:e7:5a:8b:dc:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:16:C3:29:E2:2F:EA:A3:6F:97:46:F7:4D:B5:5B:0E:08:21:D7
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:38:8f:33:00:51:6f:2f:b0:e3:0b:be:60:5f:bb:19:24:
fd:85:26:35:df:c1:f4:b5:cc:af:79:bf:ad:f1:93:9c:27:40:
c4:7c:ba:bf:8a:30:ff:6f:54:c2:3c:1e:09:7d:cc:52:eb:45:
06:71:68:7f:b5:0a:5f:9f:46:8a:8b:ac:1b:2a:74:93:73:bb:
87:61:45:0e:d0:e7:81:0e:9d:e8:25:9c:51:71:ee:d1:69:e3:
2c:48:c2:31:e3:07:2e:f5:df:d6:af:cf:8b:67:9d:c1:33:0e:
25:f1:87:c2:f2:e7:56:94:c4:12:f7:6e:9d:91:c0:db:bc:54:
b6:0b:f5:7b:7d:c3:ca:bb:1f:45:6a:ca:49:ce:5e:1c:15:27:
d0:6c:00:59:5b:c7:a2:08:61:f0:94:5e:a5:8b:d0:ac:49:a9:
48:0c:26:ae:19:23:b8:37:bf:16:f9:f5:e2:a1:04:f5:fb:a4:
f2:31:b2:1f:ab:99:6d:a2:f9:2b:b6:68:fd:f6:4a:d1:b1:4a:
39:3e:85:27:48:bd:ad:85:5f:9b:74:82:b1:bf:ab:6f:7d:80:
ea:6a:8f:02:f4:d3:7c:cc:8c:f8:9d:50:86:86:0c:7d:48:89:
db:fe:09:00:1e:ac:24:a0:a4:ed:38:5a:ab:8c:03:28:1e:5a:
c0:d8:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:27:04 2025 by rpki-client