Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: a4kthp96yswX/ujorG8uuu2yvd4o+3gvILAvF6qYZuo=
Subject key identifier: 23:DC:0E:CC:93:93:79:71:55:03:56:8B:DB:33:42:23:18:71:B8:36
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 01984A0A1BC1D8328672286549038A6452A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 134C
Signing time: Sun 27 Jul 2025 04:00:33 +0000
Manifest this update: Sun 27 Jul 2025 04:00:33 +0000
Manifest next update: Mon 28 Jul 2025 04:00:33 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: 9ZHi9cE8bktQ2WrBpoFPxPfN43XJC2KygsZPzh/IBAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1b:c1:d8:32:86:72:28:65:49:03:8a:64:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jul 27 04:00:33 2025 GMT
Not After : Jul 28 04:00:33 2025 GMT
Subject: CN=23dc0ecc939379715503568bdb3342231871b836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:08:3c:78:0d:4f:8a:59:5c:7e:2b:17:85:
ff:67:8a:8c:5a:65:1d:d5:a1:e1:1f:5c:a3:6a:36:
f1:28:f3:28:09:ad:38:15:f9:42:1a:38:30:24:f5:
d5:e5:e3:4b:d9:bc:6f:9d:a2:db:17:d8:41:64:4e:
3a:a2:4a:42:2c:57:62:2d:70:5d:67:79:80:fb:99:
65:7f:70:75:b7:ac:bd:36:54:51:d4:21:12:2d:71:
ef:b5:ac:f2:8b:fa:ce:6e:e4:d6:d0:66:a8:d1:44:
47:b6:16:77:99:23:38:30:70:0d:09:6b:08:d0:bb:
34:d5:6f:cd:e4:7c:b8:25:75:9d:9c:c3:d6:6a:0f:
17:dd:51:b8:44:6e:d8:9e:17:d5:36:ba:a4:f7:27:
99:47:12:d3:b2:66:56:ff:5d:04:4f:22:79:ed:d0:
e8:6a:3e:50:61:f5:26:c4:94:82:5c:ec:b1:24:62:
6a:71:4f:7c:77:9e:aa:10:40:17:fe:9b:19:e9:5e:
43:03:85:49:03:93:14:26:9a:70:b2:82:9b:9b:89:
a2:69:fb:ce:69:26:22:f0:ea:63:bd:55:02:fa:35:
a9:58:72:6c:11:79:ba:14:36:b2:b1:71:d8:30:e5:
0e:43:92:d0:48:17:50:b2:f7:19:5b:5e:5f:9f:77:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:0E:CC:93:93:79:71:55:03:56:8B:DB:33:42:23:18:71:B8:36
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:fa:56:68:c6:97:2f:8a:71:75:57:32:0b:89:bb:f7:76:
27:03:bd:5d:c2:76:cb:c6:ce:6e:5d:3e:13:2f:09:fb:25:cf:
e3:3b:f3:24:72:38:c6:77:92:b7:8d:9c:60:82:e1:5a:c0:de:
8b:94:d7:3a:d7:15:3d:27:4f:d8:d2:08:8e:ff:7e:8a:db:94:
e8:6c:af:64:52:d6:fc:a6:7a:08:e8:46:27:24:8e:a8:1e:c7:
e9:fe:14:1f:79:16:3e:24:54:2c:4c:e0:66:43:a0:cf:06:08:
f5:42:9b:53:21:33:94:74:e2:8d:54:d8:64:38:08:5b:20:08:
73:1d:c7:24:17:0a:06:7e:1f:ed:84:e3:87:44:7b:cd:46:bc:
74:c8:c8:29:46:98:33:f5:21:90:96:1e:62:e8:50:56:96:6c:
2e:c9:25:e2:eb:d9:62:5c:fa:67:67:25:4e:0d:d9:9c:11:5c:
a1:b1:f8:8b:ca:47:d7:d0:48:9e:1e:d0:c8:e7:98:e1:a6:5e:
57:94:83:29:74:d6:0a:5a:b2:8e:20:4d:7b:73:ba:e7:28:56:
a2:36:99:5a:84:02:4d:3b:06:64:5c:7c:fb:7a:14:5b:e3:51:
00:77:93:2e:f0:76:62:b9:e2:0e:3a:28:e9:5d:2c:31:1f:52:
1c:a7:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:51 2025 by rpki-client