Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: 8DD9GmJWN+PUyIE4/V3pRB+PlGSYUkSZF8TFt+uziXo=
Subject key identifier: 42:69:D9:EA:51:69:06:4A:59:38:7C:DE:C1:F7:7C:FE:7C:D9:6E:AD
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 0198586ACBB0B3D331B2ED0EC015941B8604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 23:00:50 +0000
Manifest this update: Tue 29 Jul 2025 23:00:50 +0000
Manifest next update: Wed 30 Jul 2025 23:00:50 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: R1zkj4P4LNAVdpx866sLNvzFYLRgwLueBJqlZ2qNAy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6a:cb:b0:b3:d3:31:b2:ed:0e:c0:15:94:1b:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Jul 29 23:00:50 2025 GMT
Not After : Jul 30 23:00:50 2025 GMT
Subject: CN=4269d9ea5169064a59387cdec1f77cfe7cd96ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:64:57:55:28:a4:b0:77:13:df:d0:3d:78:
f7:9b:42:3e:f9:bc:60:d0:10:97:0c:bf:cf:c9:7e:
19:aa:6e:f6:c4:8d:0e:f2:03:97:9b:4f:75:bc:00:
27:15:a6:4b:ca:7b:77:54:cc:14:96:20:3b:11:ab:
da:ae:d5:46:f8:f7:f9:0d:15:4c:23:2d:fb:2b:34:
69:90:1a:4a:77:3a:38:56:36:a8:0d:4e:37:46:eb:
a5:b6:38:f2:bf:7c:22:b4:a9:61:ea:84:db:b0:1f:
27:f5:2e:f1:ec:e3:06:88:de:93:aa:aa:da:be:04:
c3:7d:b4:7e:4c:49:33:cd:9b:c6:ce:db:ba:c8:f5:
56:ec:71:07:b0:b6:06:ec:cf:a0:5d:bc:7f:76:36:
17:f8:06:52:72:ca:66:ce:ac:9a:ee:c9:de:fb:29:
93:7e:ab:6f:f3:e3:9f:87:a7:78:95:84:98:8e:33:
0d:5d:c0:c3:17:7b:b4:76:a8:81:25:2e:12:9f:69:
99:99:95:49:45:6d:5a:2f:6f:19:0a:99:37:08:25:
94:d0:31:97:31:66:7a:52:bd:08:87:66:03:9f:1e:
79:1c:d0:20:b2:74:e9:c0:4a:ff:eb:3a:14:f1:89:
77:b8:ba:0d:1a:22:32:e4:8f:eb:eb:28:7b:e2:39:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:D9:EA:51:69:06:4A:59:38:7C:DE:C1:F7:7C:FE:7C:D9:6E:AD
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:27:fc:06:b5:3c:97:52:07:9c:b4:bf:57:0a:c0:5c:f4:59:
08:86:ef:17:d1:e2:5c:bc:ab:5e:99:ed:26:e5:04:8b:9f:dd:
dc:4f:4d:92:83:e7:14:49:bd:55:7b:2a:c8:5a:6c:e8:c4:ea:
95:94:af:8f:d8:59:3f:fc:03:f9:8f:9d:1d:30:40:af:5b:4b:
51:92:33:4f:b3:a6:94:76:3f:ab:5d:f9:d5:18:56:81:b0:cc:
6d:01:60:c9:0d:f2:b3:7f:01:37:8d:29:49:ca:38:79:42:7c:
9a:c9:d8:95:6d:01:a7:e8:db:9a:de:29:5e:28:47:a2:5e:7f:
db:44:cf:84:bd:e7:34:00:39:01:f7:f5:fe:5a:b2:03:c0:b2:
a1:22:d8:85:76:35:da:7d:ef:f7:5f:76:ba:60:d3:a8:67:d8:
90:ad:34:bd:50:68:0f:7c:1d:96:1b:1a:e3:3c:23:46:18:4b:
f8:fc:2b:2f:54:6c:16:b5:6a:27:f0:18:24:39:1d:26:99:ba:
81:7a:d8:13:40:02:a0:0d:e3:ae:b3:c7:a5:ec:90:09:0c:31:
64:70:eb:96:01:db:f6:98:a3:64:d1:0d:05:ff:f7:12:6b:50:
e8:77:db:6f:cc:5d:b5:0d:72:5a:a6:53:42:a2:2f:48:8a:6e:
1a:79:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:08:34 2025 by rpki-client