Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: umx5+gsSprBBBIsASHd4gkXHsntnhYAs1pLyuL5TWr0=
Subject key identifier: 1D:1F:D5:EB:B9:40:A9:F6:94:C8:55:93:FC:9A:C8:78:DD:1C:0B:8D
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01984099967FF44ECCEF145A77495EA0DD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 158E
Signing time: Fri 25 Jul 2025 08:01:03 +0000
Manifest this update: Fri 25 Jul 2025 08:01:03 +0000
Manifest next update: Sat 26 Jul 2025 08:01:03 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: qECX7LxJgd/FucDuS0qvMY1gQnrAaP7ScUohHXFEqCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:99:96:7f:f4:4e:cc:ef:14:5a:77:49:5e:a0:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jul 25 08:01:03 2025 GMT
Not After : Jul 26 08:01:03 2025 GMT
Subject: CN=1d1fd5ebb940a9f694c85593fc9ac878dd1c0b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:1d:9e:cb:be:a9:48:bc:d2:b9:20:d5:23:
c0:17:01:cc:76:54:bb:88:7e:82:f3:a3:f5:c5:8e:
fb:a2:c7:fb:45:85:af:99:16:1f:02:85:c9:62:e2:
83:3d:71:18:95:34:a0:6f:db:f7:e8:9a:c0:26:e4:
62:07:3f:6b:e1:89:4c:a0:73:f0:ff:27:8b:f9:4d:
74:bf:6e:23:a2:19:98:c1:60:98:83:5c:11:52:98:
7d:34:f3:d1:e8:ef:e6:35:1b:02:35:c2:4c:bc:44:
de:d2:26:3e:53:e1:aa:a6:ac:a0:e9:0a:85:1e:44:
13:58:10:03:c4:61:f0:90:83:82:f6:72:75:0a:d1:
2a:a2:70:eb:dc:25:6c:33:63:67:d0:01:00:3c:68:
be:f7:ed:cb:12:59:62:97:f0:e8:0b:e4:77:ad:de:
57:b6:31:e7:42:1d:69:38:e2:73:10:c8:db:36:ee:
80:25:23:07:09:e7:a4:21:b3:48:e6:a6:7d:c4:14:
fd:39:3e:d1:bd:d4:37:be:c9:1a:1c:64:61:04:d5:
40:11:ca:cc:99:9d:be:ff:bf:e6:56:b5:da:1c:20:
0d:0a:4f:a9:06:49:0f:9b:27:b7:b6:50:c3:67:8f:
c7:36:80:05:ec:50:58:e1:c9:ac:cb:4b:2c:78:a7:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:D5:EB:B9:40:A9:F6:94:C8:55:93:FC:9A:C8:78:DD:1C:0B:8D
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5a:a4:73:d6:e5:a4:5e:28:33:3e:f9:2b:78:5a:a9:e1:d1:
74:b2:d4:12:d4:99:1a:fc:d2:e5:6e:2c:9e:36:03:c2:7c:82:
5e:c2:e1:f3:32:72:21:cf:17:79:cd:dc:de:a9:5f:dc:2c:6a:
09:dc:f5:e8:19:32:d1:d5:aa:2f:56:a1:75:f0:a2:c8:e7:32:
61:e1:16:98:c4:28:25:28:90:e2:2a:63:f8:17:0d:4b:70:86:
6a:fc:93:c9:83:28:2f:c8:58:76:e3:a0:f9:57:ef:fa:bb:f9:
df:bb:eb:84:fc:31:b1:ac:ee:7c:e1:ff:55:48:ee:d6:7a:c9:
d9:3d:8a:f4:e5:b6:82:27:d8:db:e1:b7:d5:b9:bf:fe:03:9e:
98:01:d3:0d:6f:27:71:76:8f:59:ec:0a:36:67:ab:c2:13:c2:
3f:8b:0e:25:d5:54:a9:44:e7:37:f4:c7:9e:26:79:59:b3:9e:
68:77:41:94:77:28:82:a8:44:a9:a1:fc:6e:0c:b0:37:45:85:
03:54:58:09:f5:1a:22:b8:af:b0:1b:5c:c4:3b:d2:89:ca:67:
08:c0:da:18:c8:77:d0:df:71:d3:d0:4a:7b:a9:4b:79:17:f9:
71:77:e0:6c:dc:f5:a7:f7:0e:53:2b:06:92:28:ce:c7:62:e0:
8b:bd:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:31 2025 by rpki-client