Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier: BJQe+DJO8QwI+XorBcnhTADIwGMdevBsyiScs+CCI6E=
Subject key identifier: 67:63:B0:A3:74:7E:06:31:88:14:C8:34:0B:FD:74:6A:61:E6:C9:DC
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 01984476457517C164C1ACC57504B187C29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number: 14BC
Signing time: Sat 26 Jul 2025 02:00:58 +0000
Manifest this update: Sat 26 Jul 2025 02:00:58 +0000
Manifest next update: Sun 27 Jul 2025 02:00:58 +0000
Files and hashes: 1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: xFw4/dp1T2VLYIR4GgixAJz5/+dicWZ/O+BhXXS+1BI=)
2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:45:75:17:c1:64:c1:ac:c5:75:04:b1:87:c2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Jul 26 02:00:58 2025 GMT
Not After : Jul 27 02:00:58 2025 GMT
Subject: CN=6763b0a3747e06318814c8340bfd746a61e6c9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:22:7e:94:73:b0:f3:4c:e4:c2:21:a0:77:
26:d7:52:64:ee:e6:e2:a9:74:cc:aa:03:a4:61:8c:
4e:5e:1a:52:39:69:23:b8:59:40:92:7b:6a:3d:b5:
2a:14:74:27:d9:d8:ea:42:a9:59:bd:b9:d1:5f:79:
fe:38:38:6d:6a:d6:c1:df:fa:0d:d4:92:d4:89:ea:
71:c6:16:48:05:9c:5a:8e:83:6c:17:9a:e9:d3:9a:
bf:cf:e8:2b:f7:e7:7f:fc:bc:e1:76:f0:81:89:b2:
6d:2f:16:93:f5:44:65:d8:2b:ba:8c:13:06:0d:ab:
30:85:e2:4d:5d:09:47:67:44:77:de:cd:58:90:4c:
e5:b7:04:3b:77:e9:bc:0e:f9:4a:a6:71:c3:51:f8:
b2:30:d6:9a:23:a7:7a:aa:01:3d:53:dd:5d:00:09:
12:75:b2:79:ab:d6:8d:67:45:61:f3:7c:df:10:1b:
bd:ce:5b:b1:18:e8:d8:00:54:07:ff:ac:09:4a:0c:
ac:47:7e:f6:bc:74:1e:73:84:8d:f2:99:73:a3:04:
52:17:55:96:c2:95:b9:6c:63:c3:d8:42:8b:dd:b6:
5d:ad:05:f2:20:87:e0:bf:8b:65:41:ba:b3:89:a6:
92:c4:0e:5b:58:43:69:fb:2a:8f:da:0a:1b:ae:ac:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:B0:A3:74:7E:06:31:88:14:C8:34:0B:FD:74:6A:61:E6:C9:DC
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:6b:20:9b:1a:23:f0:6d:03:c5:38:f5:48:79:42:9d:bd:
13:35:cd:4f:35:e1:2a:86:92:78:3a:56:57:14:2d:33:1a:52:
b0:97:cb:63:2c:2a:57:5f:48:55:b8:02:0d:78:b7:bb:ec:78:
a2:d2:b0:2f:a4:49:c4:16:83:d7:b3:1e:84:c7:31:20:b2:13:
86:a4:11:10:a9:27:95:d3:8f:cb:28:a8:93:c7:3d:f8:ff:19:
10:08:3a:11:62:f1:74:51:c4:48:a7:2d:36:91:5f:ea:53:59:
8c:88:40:df:a4:d2:ae:f3:d6:87:2a:b3:b0:3f:1f:d0:47:cf:
5d:50:90:7e:18:9c:41:c4:b4:d9:e1:88:c4:f1:26:b0:14:3a:
15:fe:46:b6:33:8b:17:a3:4b:a6:f8:d0:49:9a:55:07:7c:37:
82:84:12:18:19:6b:6c:41:44:9e:50:d3:15:2d:1e:ee:6e:42:
60:81:88:c4:be:dd:72:ea:55:97:38:c0:7f:15:92:89:73:9f:
ac:04:64:90:2d:59:85:51:db:d2:ee:8d:74:93:12:ec:26:90:
5d:4c:fb:e8:d9:f5:27:fd:3f:a8:8f:0c:96:45:19:03:93:df:
91:ec:cb:b6:8c:e3:d2:55:06:ed:9c:0c:c9:79:fb:34:d6:75:
fb:da:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:41 2025 by rpki-client