Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: SnIyIn7z6iXlkm2VSuV8UUVu0QNLqeAM7/5ySZ7zfRQ=
Subject key identifier: 8A:0A:2E:0C:26:A2:9B:75:20:F7:08:5E:C5:7C:FE:66:35:EA:D4:06
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0198462CF02B93D90AC6CEB05190A51E9188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 10:00:06 +0000
Manifest this update: Sat 26 Jul 2025 10:00:06 +0000
Manifest next update: Sun 27 Jul 2025 10:00:06 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: /9XLoLvdtraJLBWkFgfZJU9FlTkE8mRXudG0SYGaGBc=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2c:f0:2b:93:d9:0a:c6:ce:b0:51:90:a5:1e:91:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jul 26 10:00:06 2025 GMT
Not After : Jul 27 10:00:06 2025 GMT
Subject: CN=8a0a2e0c26a29b7520f7085ec57cfe6635ead406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:f3:6b:27:04:91:7d:e5:f2:35:ad:19:0f:
18:30:5f:51:f8:93:92:2b:7b:70:b2:8a:e8:9b:61:
29:ab:3c:45:dd:23:d0:c8:cc:4e:25:53:83:c6:36:
cd:36:6f:5e:57:02:16:55:63:71:ee:f1:cd:16:d2:
56:ff:d8:aa:f0:2a:0e:12:71:31:41:e1:62:9c:ed:
14:50:c5:b0:9c:96:d7:84:0a:6e:07:b7:13:67:41:
e7:1c:cf:0c:4a:52:d7:e1:bc:c0:9c:f6:49:e0:a8:
ca:d9:bb:e9:49:91:8e:1b:fa:30:b1:b5:ad:c1:f3:
21:17:7d:f6:c1:0e:93:e4:c0:83:e7:b6:91:d4:11:
0d:0b:cb:ab:6f:a0:25:ba:df:44:c1:7a:a7:9c:10:
11:0f:7d:5f:c2:04:66:62:0a:98:da:42:e9:9e:18:
91:d4:a0:b8:b9:f1:41:ca:b6:9f:56:ac:d1:ec:9e:
9b:d9:12:99:90:49:30:56:19:66:44:2a:02:cc:8e:
34:90:0d:69:7d:8b:5b:2e:a9:e3:a1:5a:a3:e8:ab:
5b:4a:a9:5e:fe:b1:bc:70:a6:d6:eb:0c:26:ef:34:
9f:89:dd:21:5e:48:94:4c:83:43:db:70:77:a9:1c:
2f:69:0b:e7:8f:a2:b0:7d:be:bb:d3:fe:6c:3d:0f:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:2E:0C:26:A2:9B:75:20:F7:08:5E:C5:7C:FE:66:35:EA:D4:06
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:49:1d:71:bf:cb:ab:74:eb:bb:d6:60:a1:96:06:51:1f:
e7:f0:66:d4:27:97:5a:dc:41:59:88:9f:f5:ad:57:b4:42:b7:
aa:12:7f:fd:3c:dd:42:d8:f2:bf:e6:2c:4a:22:11:d1:2d:1a:
54:27:63:30:a5:67:ff:68:14:78:ac:d0:5b:b9:3e:f8:75:8b:
fe:89:03:f4:b0:18:34:3d:d9:c3:e3:a0:f9:e1:bc:2a:9b:12:
0e:fc:49:d4:9c:51:0f:4d:b4:3c:3b:ce:02:23:14:65:ba:71:
d4:49:81:ba:f2:12:88:17:67:29:c2:c8:a5:04:8a:0d:27:0f:
9d:45:af:36:42:99:95:c4:5f:ea:8a:ae:c4:fd:02:a4:e6:24:
0a:cd:68:89:05:eb:bc:0c:f2:b2:f9:38:f7:80:37:95:38:2d:
8a:87:c9:b4:a1:8a:2f:f3:d1:a1:a0:c3:af:a7:9d:d8:b9:8b:
cd:67:bf:d3:60:05:ed:be:68:dc:0a:7a:b8:68:ae:40:b2:15:
35:85:c7:9c:9d:73:f0:12:e6:e4:00:1d:c9:e9:f2:e8:7b:c2:
db:b6:6c:22:cd:89:1f:c5:78:ca:23:38:c2:2d:08:e3:02:a7:
2c:cf:ac:f2:4f:de:7a:8d:dc:d7:62:9a:bc:2c:b4:8a:39:c2:
8a:8d:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:04 2025 by rpki-client