Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: dOeFptxyuWQzJdpg9yEFfxTFCnkU5m3wadgfZZ0cRQU=
Subject key identifier: E4:3E:FC:E5:E9:8F:2E:77:2F:A4:66:B5:8F:CC:6A:F9:12:C4:85:EE
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 01984A0A4A6E5921AA050B0381DAB248AB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0DF7
Signing time: Sun 27 Jul 2025 04:00:45 +0000
Manifest this update: Sun 27 Jul 2025 04:00:45 +0000
Manifest next update: Mon 28 Jul 2025 04:00:45 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: CHr3Sb7YOUuZ7zh50auJDOy3NLwfygldKypNBVQ8e80=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4a:6e:59:21:aa:05:0b:03:81:da:b2:48:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jul 27 04:00:45 2025 GMT
Not After : Jul 28 04:00:45 2025 GMT
Subject: CN=e43efce5e98f2e772fa466b58fcc6af912c485ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:66:5d:cf:76:3f:84:d1:02:f8:24:ee:4f:
2f:23:f1:41:75:fe:96:fb:7f:a1:f7:f1:5c:9d:1c:
20:ee:a0:02:98:12:28:26:75:f9:6e:b8:b2:d8:9d:
3f:aa:63:a6:e2:5f:ab:de:d1:ee:21:eb:d2:34:2a:
6a:7c:43:bb:72:25:0d:dd:ee:d0:51:ec:09:ce:87:
ea:a4:f5:a1:72:14:a1:15:a6:09:36:e2:ff:a0:9f:
fd:f2:f9:db:8d:e8:07:d8:83:40:56:c0:96:4e:d2:
3d:6b:c5:3c:31:9a:b4:88:82:77:b4:5a:2f:87:e9:
33:56:1c:ef:5c:17:3f:77:f7:75:eb:c3:7e:d7:c1:
ca:e8:9e:c9:fb:ae:5c:55:1d:10:99:2e:3a:68:11:
ea:9b:db:e4:cf:22:a2:05:98:47:40:35:a2:b2:43:
70:85:3d:b9:68:25:23:28:0b:fd:02:f9:1e:23:e8:
8f:38:68:31:6e:02:f2:45:d3:82:11:39:c9:dd:87:
ac:5d:6b:70:2e:7e:d3:d6:56:ea:58:6f:33:02:1b:
d7:ee:3c:0c:07:4a:a3:f1:da:f6:fc:01:01:8a:35:
29:09:62:ef:fc:42:fc:06:d3:a1:d0:04:aa:da:75:
0c:ef:91:45:1e:3e:f2:71:24:72:da:26:39:09:8d:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:FC:E5:E9:8F:2E:77:2F:A4:66:B5:8F:CC:6A:F9:12:C4:85:EE
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:fb:7a:86:01:51:59:6c:83:31:6e:4a:ca:cb:c4:6e:c4:
82:27:ed:1f:15:8e:e4:5a:a4:ec:cc:c2:c8:c4:c8:68:27:34:
7a:20:f5:f7:1c:35:33:5a:7a:ce:02:a9:14:47:2c:97:c2:dc:
da:2f:da:b9:a8:80:7d:12:c3:48:db:41:70:c1:7a:33:45:7a:
4e:d7:1b:54:b1:53:96:92:6b:12:50:6b:94:87:60:54:23:d6:
00:e2:21:a9:5c:69:ff:ee:26:de:80:3e:45:bb:ef:ae:a4:19:
32:01:99:c3:95:a9:58:af:30:2c:b6:94:98:bc:36:6f:24:e0:
c2:d2:63:7f:a1:1b:44:b8:b9:d8:58:48:95:46:f7:d8:00:b3:
39:ba:71:46:6b:d3:cb:0c:45:fe:00:23:b5:ea:95:0e:9a:fc:
4f:52:14:02:e7:2c:8e:cc:5b:ae:49:ec:fd:be:b3:49:3b:3a:
37:cc:26:f7:62:ab:39:a6:bf:0f:14:38:b9:e7:cd:98:29:83:
d6:0a:d7:21:aa:9e:2e:4a:34:04:e7:ba:fe:a2:d2:84:88:c7:
01:f5:db:85:16:45:ef:0b:63:2f:bd:a6:82:15:66:3c:1b:40:
ea:41:52:bd:27:4e:1f:54:d0:0e:70:a5:a7:a1:26:20:cf:9d:
cf:dd:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:21 2025 by rpki-client