Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: cQn7wQBevmIH5mxV21EPLc/7c1qLHINEcVEo+DKN0C4=
Subject key identifier: 42:2D:66:82:06:E5:23:1A:75:AA:2A:52:DB:69:F7:DC:AE:C1:2B:73
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 0198499C54D56CA014F2CCF37BA7B3EEC06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 160D
Signing time: Sun 27 Jul 2025 02:00:38 +0000
Manifest this update: Sun 27 Jul 2025 02:00:38 +0000
Manifest next update: Mon 28 Jul 2025 02:00:38 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: bqcjv4VnoN7raE+18WxuHcC+FJf/I9Ph/qaldFq6foI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:54:d5:6c:a0:14:f2:cc:f3:7b:a7:b3:ee:c0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Jul 27 02:00:38 2025 GMT
Not After : Jul 28 02:00:38 2025 GMT
Subject: CN=422d668206e5231a75aa2a52db69f7dcaec12b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:c9:33:8b:89:4e:ab:0e:a7:98:32:c7:66:
79:21:0d:92:b3:40:80:a2:4d:aa:8e:cb:e0:0c:d8:
84:fa:9e:b5:5e:30:a2:fe:56:0a:0a:70:50:dc:cf:
e1:8e:b7:ba:28:71:12:8e:94:ea:f4:49:a4:d1:b8:
94:99:69:b1:d9:b7:21:08:34:70:00:7b:4b:f9:cd:
f2:9e:8a:12:56:ee:1f:fb:cf:5e:21:3d:6a:45:1c:
04:0b:a8:d5:59:cf:55:c7:e8:73:80:b8:b9:37:7d:
e0:2c:60:c8:06:b3:6a:bf:e7:6c:1b:b8:14:45:ad:
29:d6:fd:25:c8:01:96:a0:f9:cf:ab:f4:d1:1a:a9:
8c:04:c0:05:96:70:8f:c6:e9:f0:95:82:57:70:89:
8b:63:41:b7:31:37:b9:66:30:8c:ee:92:bd:70:fb:
86:d9:fb:d8:8b:fc:b5:f8:50:b2:ac:e2:f9:db:45:
2e:e0:9d:97:d7:95:4a:eb:8a:d3:d8:e6:5e:d2:be:
d2:2d:5a:a4:ea:66:80:db:24:fa:c3:13:b6:7b:1b:
2d:50:81:7a:ea:8d:0a:8f:b8:a2:3c:cf:03:7f:dd:
ef:95:da:55:6a:70:66:0d:ef:85:8f:58:a0:a3:99:
82:f7:ba:e6:b1:46:3b:f4:d9:03:54:2f:81:d0:38:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:66:82:06:E5:23:1A:75:AA:2A:52:DB:69:F7:DC:AE:C1:2B:73
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e5:ce:19:4f:d2:59:7a:48:9d:12:c5:e7:91:ff:73:85:21:
1c:bc:ae:93:34:9c:ee:a6:9a:28:bf:c8:87:10:d0:14:a8:63:
9c:53:fa:d0:cc:a2:02:f2:d4:6b:b6:10:4c:f2:72:b7:26:40:
97:ba:a9:84:c0:97:10:12:82:4e:31:ab:14:71:45:a5:ce:7f:
25:bd:72:5d:3b:aa:05:bc:b3:cf:e0:49:ec:86:68:88:1f:b1:
32:f0:4d:b0:75:45:24:7b:31:cc:e5:2d:33:a7:49:58:55:44:
da:64:0c:e5:06:06:4a:06:a7:10:8a:1b:ad:cc:56:45:d1:85:
10:e3:ff:06:21:30:c6:e7:3b:fa:00:89:f1:9d:cf:5e:cd:e4:
7c:26:00:aa:35:c8:16:cb:63:e7:03:0f:a8:10:c6:1c:ee:9f:
c1:ce:8e:a2:4c:36:d5:73:26:ac:cc:68:5e:99:09:0e:58:8e:
8c:3a:00:d1:78:e5:48:32:c9:c6:20:c1:ff:0d:7d:91:64:3d:
18:b8:9c:1e:1d:c6:7c:42:54:d0:d5:b0:2f:f8:86:b8:e8:09:
fd:99:99:f6:6e:00:f6:3b:7f:b7:39:d5:ca:59:35:28:4e:c9:
db:1d:69:8f:51:c1:2a:ee:c9:3c:9b:79:df:17:2b:b6:82:b8:
ec:97:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:28 2025 by rpki-client