Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier: Ccfa4XTjaOToxJWPocIk2aAlXd7VfQej+fQtys51OrQ=
Subject key identifier: 3A:B5:A4:B7:C5:21:AF:1F:E1:3C:19:11:7F:CB:98:84:03:A4:45:C9
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial: 019845895566466C82D260A6DF53149C2899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number: C4
Signing time: Sat 26 Jul 2025 07:01:24 +0000
Manifest this update: Sat 26 Jul 2025 07:01:24 +0000
Manifest next update: Sun 27 Jul 2025 07:01:24 +0000
Files and hashes: 1: 3y2tjY2wv2hPWo8Jjs9g1G9k2XU.roa (hash: qyjRMAEUAmhHrAhDYNjvXf2jg8IqGPd2UJBcfxCKTEk=)
2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: jRxRGyY21Ff8OVzhVxVgOwz7cWFiQFIWB5JfyloNmYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:55:66:46:6c:82:d2:60:a6:df:53:14:9c:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Validity
Not Before: Jul 26 07:01:24 2025 GMT
Not After : Jul 27 07:01:24 2025 GMT
Subject: CN=3ab5a4b7c521af1fe13c19117fcb988403a445c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:81:91:f7:5f:3c:41:7d:c5:54:41:38:e0:
80:8d:f8:5f:74:30:08:e3:12:ab:9b:2c:47:e9:08:
ab:eb:16:74:f8:25:86:e5:57:31:85:c4:e0:d6:10:
ac:25:a1:7a:1c:51:bc:5a:f5:ed:56:26:4f:ca:c9:
8d:cd:de:54:69:79:45:9f:7d:81:e3:9d:f5:1e:33:
df:dc:aa:80:1b:65:9d:56:8d:08:01:c3:df:2c:23:
76:8a:d4:24:fe:67:35:f7:78:0c:3d:65:b2:8f:0a:
e1:c6:57:bb:f3:3c:73:62:98:8a:1a:99:80:e1:76:
55:26:c5:e7:76:8a:2a:8d:f9:d3:28:fc:b0:fa:b9:
dd:a7:70:7a:a3:33:6e:9b:80:a9:b3:01:a1:8d:00:
5d:8f:a1:1b:fb:20:90:8f:84:32:5f:d9:3e:ea:ce:
73:02:9b:f3:e1:84:ef:fd:29:1a:45:4e:60:dd:66:
96:e5:b0:bd:61:31:a0:44:72:fb:2b:ad:bc:b9:87:
81:41:91:ba:96:1f:bc:b9:c4:e3:d4:fa:37:fd:53:
08:de:43:95:db:85:6f:f3:ad:d5:c4:f7:d0:96:7f:
e3:c1:f5:51:f9:65:58:08:a8:93:28:78:8a:d4:4c:
a8:43:19:1d:84:33:3f:3c:22:1f:b3:a7:af:e9:a8:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:A4:B7:C5:21:AF:1F:E1:3C:19:11:7F:CB:98:84:03:A4:45:C9
X509v3 Authority Key Identifier:
keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:37:4c:4e:17:a0:03:aa:3c:04:70:06:77:90:05:93:9a:
e8:09:78:cf:5c:87:6b:df:0d:b4:a0:12:97:77:e5:2c:c4:57:
2c:9a:4f:3f:87:d6:a1:68:b6:b0:da:ad:90:84:3c:22:7f:24:
33:2b:dc:b9:b2:a0:37:2e:a7:13:e6:60:59:70:89:55:b5:fe:
f0:75:57:d2:7f:36:f1:42:00:cf:37:2d:17:49:aa:3a:45:5e:
61:61:7b:48:77:c0:58:e2:c6:43:d4:77:63:ba:3e:5e:dc:b2:
59:8d:85:58:5c:59:86:c3:97:a7:f3:99:7f:b7:1f:7e:21:93:
f7:c9:30:24:f3:2b:d2:38:bb:1d:cb:1a:bf:7b:1e:4f:1a:ac:
87:4a:86:dd:c6:c5:e5:2a:69:ba:d7:f1:b7:f9:05:32:e8:23:
01:10:42:c3:d4:85:df:e0:a0:8a:dc:43:d9:75:4e:9b:e2:a0:
12:17:0d:18:63:f6:9f:87:6d:4d:7b:ea:bc:ef:73:d8:d9:2c:
82:76:3e:19:4e:f2:7f:9d:5e:24:2c:b8:b9:78:59:5a:2e:63:
a1:db:0a:47:ff:73:ee:27:26:fb:d6:3e:1c:a8:47:c0:1c:9f:
09:09:ee:3c:41:92:d7:1f:b0:47:25:b7:52:3f:9d:86:1d:86:
5a:d8:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:43 2025 by rpki-client