Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File: uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier: aYeS+nCeQXwla3qxu7yVo8YmPOLNbhWXlbUk02JLNWw=
Subject key identifier: D5:29:0A:2D:CD:AE:AC:34:85:40:E9:B5:83:5B:74:41:9C:9B:97:92
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 0198530E416612E07B125059ACA1F3413182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number: 0654
Signing time: Mon 28 Jul 2025 22:01:39 +0000
Manifest this update: Mon 28 Jul 2025 22:01:39 +0000
Manifest next update: Tue 29 Jul 2025 22:01:39 +0000
Files and hashes: 1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=)
2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=)
3: 7_z910fyUdS3UV3iXZAalmMZpHc.roa (hash: Ccdq640YY3YzbW+naDaW3oCRMsiBEyNstC2n1WOXCqI=)
4: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=)
5: cKixBdA2YsQGbECfVrRBeHDlXYw.roa (hash: qJETwYzXO3XeLPn/+rF185rIfriEwSzO+xMEVnrI5/g=)
6: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=)
7: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=)
8: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: wG9e81qgzX64saaCeZCFyjJDMxsbwijpM5GKaKJ1p2E=)
9: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:41:66:12:e0:7b:12:50:59:ac:a1:f3:41:31:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jul 28 22:01:39 2025 GMT
Not After : Jul 29 22:01:39 2025 GMT
Subject: CN=d5290a2dcdaeac348540e9b5835b74419c9b9792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:a2:12:da:ad:bb:eb:87:85:ca:73:ac:a0:
a9:b4:26:b4:d2:d6:58:4e:2c:ef:fd:09:10:fd:ac:
20:82:c9:b1:1e:9f:76:6c:ab:f4:07:7f:98:75:9c:
2c:d7:34:f0:48:0b:39:25:e3:cb:6b:73:19:f0:ef:
0b:36:ef:1f:fc:15:c2:b2:67:2e:83:5a:8c:a3:17:
59:46:8f:51:b4:bf:1c:f4:bc:06:06:36:cc:2f:5f:
7f:77:69:6f:e8:72:c1:85:61:4a:a0:da:11:11:18:
19:1d:fd:92:7e:ec:18:95:87:3f:5b:4e:26:89:d3:
b0:52:27:09:e3:5c:1a:ea:49:b2:1e:cc:66:b3:94:
d0:eb:e8:60:bb:4b:c7:50:7e:67:b5:7e:09:12:70:
61:65:27:49:cb:89:b7:58:e3:31:45:cc:92:c4:5d:
7e:8d:50:01:c9:86:6c:72:21:38:3d:c5:91:39:d7:
22:7e:06:a7:01:20:02:81:89:4c:1d:14:8b:49:61:
2a:f8:62:53:b2:15:ce:4b:d6:d1:67:2d:6b:10:37:
c0:e4:af:31:7a:2f:fd:84:f9:a7:22:c3:36:f1:e5:
25:9d:5a:45:95:c1:0f:22:44:74:e9:b1:6e:bd:02:
30:36:94:09:e0:7a:37:dc:ff:f6:6f:3f:e9:f5:46:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:0A:2D:CD:AE:AC:34:85:40:E9:B5:83:5B:74:41:9C:9B:97:92
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:31:c8:89:3f:89:66:28:7d:74:4b:88:fe:cc:7c:35:81:
11:de:d3:7f:18:0c:a0:8b:24:b2:04:15:42:fe:bf:07:e4:9b:
0c:d7:50:43:d1:5b:ce:0c:b9:e5:61:04:29:8b:09:71:dc:ac:
91:0b:e4:1d:2d:ea:ef:81:23:00:2b:91:11:70:a7:3c:67:e1:
95:b3:ea:d4:2e:71:1b:1e:17:25:1e:75:92:c4:6d:64:50:a8:
2d:2f:a3:6f:e2:a6:f0:8e:71:a2:be:f7:b3:89:50:84:c6:b1:
ab:26:e2:af:3a:8c:3b:42:09:1b:57:b6:98:62:8c:c8:f1:32:
5f:98:13:c5:eb:37:a2:b0:1f:11:b2:8d:20:0b:88:c7:e6:fc:
d4:79:01:a5:2f:57:ad:84:bb:45:a4:ee:c4:b5:75:3c:d3:68:
85:58:8a:0e:fd:8b:a4:de:7c:71:9f:46:1f:40:24:f5:dd:34:
4a:4f:46:45:6a:d5:87:87:a9:6f:e6:0b:c7:4c:fc:bb:35:f3:
be:78:42:15:e8:f6:20:13:3d:95:34:b5:17:33:ff:07:55:a2:
b5:86:6c:15:b2:76:ba:24:0f:2d:5f:a9:87:12:73:e7:2c:73:
c0:d5:0e:74:68:02:8a:79:e9:9e:ff:19:cc:df:62:3e:68:f6:
26:ae:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:17:59 2025 by rpki-client