Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: 97y1gF5ZXicUYYFDrh7YhgmeCtn91KSltjDuvKZ7Kww=
Subject key identifier: 5B:3C:70:63:8D:71:43:11:70:4F:71:C1:91:7E:94:4E:DA:C9:13:E3
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01983B049ED8CBDD3B7410137DADE99FA29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 05CC
Signing time: Thu 24 Jul 2025 06:00:15 +0000
Manifest this update: Thu 24 Jul 2025 06:00:15 +0000
Manifest next update: Fri 25 Jul 2025 06:00:15 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: HD6KEQ8zhFv+OMao3d7w0GWBsMv2RVQolbmtdhj/k4k=)
2: hgObzkM_wwvc0dyGvrLNFkHuJic.roa (hash: 2fUnYf8lmzD0ArkCZKXV0YmZoW0CZyUldL0enIXGOPQ=)
3: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:04:9e:d8:cb:dd:3b:74:10:13:7d:ad:e9:9f:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Jul 24 06:00:15 2025 GMT
Not After : Jul 25 06:00:15 2025 GMT
Subject: CN=5b3c70638d714311704f71c1917e944edac913e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:79:e8:cb:82:39:06:d2:3a:41:64:4b:68:
64:92:ee:0d:06:0b:ca:d9:96:b0:8d:c8:fb:3c:fb:
3d:ff:6f:f1:d1:99:9b:1f:29:ae:30:ae:e5:84:df:
27:73:0f:bc:91:f0:9d:59:a6:d3:5f:aa:73:1b:01:
91:7a:50:bd:e1:cd:64:75:90:16:2e:bd:f2:6f:27:
4d:b6:5e:49:a4:69:eb:63:6e:49:7c:81:99:2a:99:
b0:bc:dd:e3:84:60:5f:06:f8:ed:0a:d2:e6:bf:d9:
ed:ca:10:46:0b:a8:83:25:9a:cb:2d:ac:31:97:d6:
f2:20:41:bb:a0:31:28:e2:f0:00:34:f1:1a:ec:d3:
f1:61:6b:6d:54:24:4c:fc:d6:5e:06:9d:c0:3b:8f:
79:d4:e7:30:b2:e5:08:09:bc:58:c1:53:8c:e0:f0:
c3:21:17:94:31:ed:24:50:5c:d0:23:27:0f:2d:4d:
95:e5:28:c2:08:be:31:ec:21:47:a9:c0:00:e5:1c:
15:1e:1b:1d:dc:42:51:0d:9c:c1:58:54:dc:ce:c7:
93:9c:5a:61:7f:2b:c5:a8:31:86:98:fe:47:1b:6e:
42:7b:be:7e:e4:68:04:cf:1d:14:a8:15:bc:79:cd:
8d:7d:09:ef:71:5b:5d:24:58:ca:4b:d5:df:5f:86:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:70:63:8D:71:43:11:70:4F:71:C1:91:7E:94:4E:DA:C9:13:E3
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ff:9b:4b:0a:02:5d:63:89:35:e8:09:25:ec:27:71:b8:4d:
13:b2:94:6a:1d:db:34:a0:47:21:2f:29:2f:a2:d1:64:05:03:
92:50:f3:cc:af:81:a3:b8:76:62:dd:0f:54:1d:12:3a:95:00:
fd:3b:24:b5:f1:88:be:3d:99:05:a3:f0:57:2c:c4:86:20:e9:
10:77:9f:ec:b7:03:e5:82:96:4e:b6:95:fd:3c:2e:d4:27:ed:
f5:7d:1a:10:a1:46:25:09:02:f6:6d:df:28:27:30:5a:22:d9:
f5:89:56:30:87:8f:77:04:af:95:f6:24:42:61:8d:90:0c:21:
a3:df:9d:a5:64:a3:ed:ae:2c:be:8c:a5:be:bd:76:75:98:d9:
94:d3:a7:74:1b:44:6c:67:10:48:1a:95:89:5d:0d:68:10:3c:
ae:1e:e8:cd:e1:95:3b:2a:16:c8:e9:4a:78:33:0f:12:57:5c:
8d:87:90:b5:4d:46:5a:02:ae:b3:d6:19:fe:75:94:ce:29:20:
b0:d1:fc:6d:1d:1f:a1:44:79:d1:cb:48:48:a8:32:15:45:9e:
60:0b:76:78:39:38:2c:a0:9d:2d:ef:51:ec:8f:b2:f0:ec:96:
db:0b:e0:ef:75:01:53:6d:bd:54:b7:61:93:dc:4f:11:7e:cc:
93:cd:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:18:03 2025 by rpki-client