Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: 8GG4KTHayY1ZhZ9ekCL05lf2aMrG44TffJxIljog1uw=
Subject key identifier: FA:E7:82:F3:DD:D0:5D:0B:20:EC:41:17:CC:0E:75:E6:9D:97:AE:3B
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019855A11B1890C415F4394705E817485540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 14A8
Signing time: Tue 29 Jul 2025 10:01:18 +0000
Manifest this update: Tue 29 Jul 2025 10:01:18 +0000
Manifest next update: Wed 30 Jul 2025 10:01:18 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: Fqu3yceT0Ew3jV3UsbqO/arX0sPhxa/0lRdcXaNrefw=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a1:1b:18:90:c4:15:f4:39:47:05:e8:17:48:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Jul 29 10:01:18 2025 GMT
Not After : Jul 30 10:01:18 2025 GMT
Subject: CN=fae782f3ddd05d0b20ec4117cc0e75e69d97ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:e8:d3:41:df:94:83:f4:44:05:fe:b2:5b:
47:80:ff:9d:31:bb:31:c7:f6:32:ac:6a:b3:c7:4c:
4d:22:4c:55:b0:e2:b8:67:32:a8:38:75:2c:d6:16:
b3:4c:95:45:58:48:39:9d:aa:5f:0f:53:bb:09:30:
69:9e:fe:76:77:ac:bb:9f:eb:d3:9a:6e:97:d3:e0:
62:6f:01:5b:93:64:a1:f2:32:d2:e9:7f:90:b2:17:
fd:e3:f3:c0:51:24:be:b7:f1:d4:14:45:bb:40:00:
59:5c:d8:6c:bd:73:3a:93:9f:2c:a3:29:cf:9d:0e:
2b:78:d4:4a:05:f7:4d:53:7a:ae:3e:2a:66:f6:36:
8f:a5:10:cb:c9:8c:3c:3a:ad:04:0d:bb:8c:a4:d7:
bf:b0:70:ea:46:e8:9f:30:2c:bf:26:19:cc:e9:42:
13:5e:4a:30:f5:b1:0e:3d:b5:fe:18:00:3f:07:e8:
47:c2:77:46:06:a2:78:64:fc:5a:06:d7:a3:2b:cb:
f9:ae:fc:90:01:be:9d:c9:cd:b8:ca:25:22:f7:c6:
37:97:2e:ba:90:12:7b:ca:a3:49:a0:75:89:43:5f:
fe:28:08:08:ab:75:ab:df:e8:0e:51:ee:90:42:02:
bf:30:bc:e3:22:05:4c:51:10:1e:ae:56:b0:59:06:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:82:F3:DD:D0:5D:0B:20:EC:41:17:CC:0E:75:E6:9D:97:AE:3B
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:00:d1:3d:44:21:26:b2:62:e1:61:5b:32:fe:11:e0:05:
53:a3:b2:7a:7b:ee:89:b0:77:b8:b4:a7:97:5f:2c:31:e2:21:
d5:39:3f:31:9f:3a:10:4a:1c:82:c5:27:85:8f:c1:00:f0:90:
e5:26:63:bc:02:c3:e0:5d:ec:e4:40:ca:08:11:3e:92:5b:f2:
8b:04:30:8a:02:61:d0:17:67:1e:6e:3e:f4:5d:13:b0:eb:a3:
b5:54:54:8c:a3:b4:f7:f2:1f:e3:51:c8:7a:5f:79:34:5b:ef:
e1:3f:c3:d0:1b:30:01:d9:cf:1b:f7:a8:6a:83:48:bc:f0:67:
74:45:50:57:1e:e6:72:df:7e:99:26:0e:31:ce:f7:a6:75:1a:
fe:30:21:a4:07:31:ef:11:1a:ac:65:8e:50:c6:51:88:97:a5:
97:8f:0c:97:14:0f:9a:35:ee:16:a9:9c:d8:04:6a:5e:c5:24:
b0:fa:15:41:6a:4e:1e:2e:b2:8e:65:e6:73:20:cb:ef:31:61:
4c:43:65:37:cb:4c:d5:29:59:3a:d7:0a:94:3d:bc:24:67:8d:
ae:24:07:a4:37:a0:28:1f:2b:14:2d:b0:b2:87:90:1a:53:c3:
32:08:11:85:b0:5f:11:98:8e:6d:07:04:b8:42:5e:66:1f:92:
43:e5:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:39:45 2025 by rpki-client