Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: lByFgvoM7NnwBB+Mx5ufLv7tBvNwjIJsRwrBYviNN30=
Subject key identifier: 5C:D1:49:5B:F9:EF:04:0C:5D:D2:03:5E:FA:EB:64:F4:32:B8:C5:91
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019849652E5F6514F416B84EDBAC53A2067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:24 +0000
Manifest this update: Sun 27 Jul 2025 01:00:24 +0000
Manifest next update: Mon 28 Jul 2025 01:00:24 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: EXVOatqK9ReMLqXC/7zN7ohbX+MDDS/0KXtFZ/xwRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:2e:5f:65:14:f4:16:b8:4e:db:ac:53:a2:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jul 27 01:00:24 2025 GMT
Not After : Jul 28 01:00:24 2025 GMT
Subject: CN=5cd1495bf9ef040c5dd2035efaeb64f432b8c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:01:a5:06:27:0b:b9:79:08:98:0e:6f:87:
34:ea:2f:d1:84:33:ad:a7:01:bc:d3:f9:d5:92:fd:
be:7e:65:3a:fb:20:e7:5f:7f:aa:23:03:40:6b:57:
15:2f:20:88:c7:69:80:83:c3:0d:ff:c7:c1:85:94:
5c:fb:e9:bc:81:f2:62:97:27:7c:02:f0:da:99:db:
0c:4e:a6:50:0e:bd:c0:95:39:c6:7c:d5:27:6b:02:
20:e5:88:54:db:33:f2:f3:a0:9e:16:c5:20:f7:dd:
9c:78:ea:16:98:24:ea:66:a4:b9:9c:ec:e4:5e:a8:
8a:76:c9:98:10:6b:01:95:a6:1a:e8:cc:14:71:0a:
fc:7f:f6:77:aa:a0:68:48:1f:ff:bf:bb:12:52:0c:
08:9c:9a:34:92:b1:ab:dc:40:ec:9a:32:c9:29:b6:
70:11:71:4a:9a:cc:06:5d:dc:37:c7:ff:c3:4f:1f:
72:11:6d:bd:fd:bf:38:3a:d7:a6:67:fe:eb:8c:85:
71:28:c1:9e:ae:f5:a6:ac:3c:65:c3:c3:73:37:ad:
3f:34:a4:d3:00:e7:4c:36:b2:a9:f0:1a:3b:b4:3d:
e2:46:09:a8:67:c0:e8:e7:b5:0c:ec:92:19:98:28:
7d:f8:6e:19:07:5f:fa:ad:97:2c:d0:b0:53:8e:9b:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:49:5B:F9:EF:04:0C:5D:D2:03:5E:FA:EB:64:F4:32:B8:C5:91
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:11:72:58:46:15:8f:20:aa:a0:06:2e:58:f1:da:b6:4d:
da:67:d8:6f:dd:d7:88:b7:f1:36:1f:09:54:a9:77:f1:ff:95:
21:22:5e:2e:18:91:a6:d3:b1:96:cb:3c:ab:9e:c8:7d:0c:51:
b3:6b:95:9a:4b:5e:d5:e3:87:ed:df:7b:6d:99:58:be:9b:3c:
ab:17:41:79:36:a0:71:e1:42:2e:d6:2c:dd:6f:25:f7:4d:38:
af:a7:42:a8:6a:94:fa:78:d9:da:ff:6c:48:2e:0d:c8:bf:78:
ab:47:13:61:b5:a2:99:2d:c9:67:5b:1e:00:9a:2f:68:af:52:
cc:09:1d:8e:6f:14:85:15:3d:45:0a:f8:2d:85:38:8f:74:b5:
60:ca:4b:89:9e:5d:37:48:49:f8:40:cd:d5:3f:70:67:99:8a:
f0:e6:21:0d:81:2f:a1:c3:a5:a0:74:92:ec:98:9a:f2:02:b0:
14:c1:0a:c6:98:7d:ed:24:31:65:47:64:e6:91:dd:e9:85:73:
30:69:af:ac:cd:a0:fa:da:6e:5b:f5:9f:31:a5:67:b8:a1:2b:
7a:dd:6e:41:c0:99:7e:55:c1:0a:fc:b0:27:7c:d3:97:52:8c:
7a:57:d0:b1:a5:44:57:d5:92:78:67:aa:92:c5:fb:90:4b:9c:
a8:26:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:43 2025 by rpki-client