Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: d3JDSn246m0u7W4zE67GkBjKlUIHn2+WqW6o/ZbU4u8=
Subject key identifier: AE:48:85:EB:29:48:F8:8F:B5:24:33:0C:B7:31:7E:CD:F7:C7:79:7B
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 01984AE5CDA9F46B579EC9AD8D7372C78FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 080D
Signing time: Sun 27 Jul 2025 08:00:30 +0000
Manifest this update: Sun 27 Jul 2025 08:00:30 +0000
Manifest next update: Mon 28 Jul 2025 08:00:30 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: HBL12IY+iQdpsWRAZT5GfSdatVx0PlBvqe0/5ef/0ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:cd:a9:f4:6b:57:9e:c9:ad:8d:73:72:c7:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Jul 27 08:00:30 2025 GMT
Not After : Jul 28 08:00:30 2025 GMT
Subject: CN=ae4885eb2948f88fb524330cb7317ecdf7c7797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:dc:60:79:b5:86:87:fd:97:de:f4:8f:2e:
41:cc:9c:57:76:e8:69:6c:fe:f4:f4:33:0f:38:fa:
e8:e8:08:4f:c3:19:47:17:90:2c:56:73:7c:61:13:
c9:f4:2a:38:78:73:a6:8b:b8:5b:1c:7e:37:bb:5d:
01:78:97:36:b5:00:9e:fe:c1:bd:c8:58:3e:2c:53:
f5:d4:07:e2:9b:36:a7:09:ef:eb:5e:85:90:89:3d:
d0:91:cc:6a:a2:44:42:b7:fe:43:2d:d6:3d:0a:d4:
2d:98:a9:3a:fa:4b:40:de:d8:2b:c2:89:0d:dd:1a:
62:b3:9c:9b:bd:b9:97:d4:9c:ed:70:b4:c4:4f:f6:
bf:19:a8:0d:f2:c8:01:30:92:3e:b4:47:48:08:af:
cb:84:34:4f:10:fc:2a:0f:3f:9b:29:43:24:78:40:
e8:76:56:2d:03:4f:90:7b:80:67:26:50:fb:11:4f:
20:4e:3e:d0:72:ca:57:c6:ce:f3:20:f1:18:17:9e:
40:cd:02:c9:e4:e4:2f:d3:8e:f3:10:b4:2b:10:c7:
e6:6e:e8:90:86:a6:56:0c:00:d3:80:38:d5:d3:ce:
8f:a5:5c:ce:6d:c6:b6:7d:17:09:8b:1c:14:b5:01:
23:f4:4f:e4:f5:10:fd:34:62:d3:1f:0c:c8:08:ec:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:85:EB:29:48:F8:8F:B5:24:33:0C:B7:31:7E:CD:F7:C7:79:7B
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:cf:2e:52:d0:d7:bf:34:1c:e3:79:36:5c:c9:db:0e:ce:
4d:2d:48:e2:55:da:f1:40:e8:a8:a9:24:94:92:d9:6c:0c:21:
89:cd:13:d4:3f:03:bd:30:97:2a:c1:f5:5a:da:ef:3c:75:09:
23:df:87:fc:0e:09:dc:27:3a:b0:f9:80:ef:e6:50:9d:aa:a1:
d6:ce:4a:8f:73:64:b1:47:ad:03:93:02:ac:f7:a8:b6:bd:bc:
ad:e1:8f:8a:22:37:03:24:82:0b:58:23:ca:fd:2c:18:39:4a:
1e:39:09:ab:4b:9a:db:43:9a:79:b1:11:fc:57:91:11:15:40:
85:92:42:07:7b:44:0a:e7:97:43:01:91:31:75:5d:e4:e6:80:
d8:7a:2e:80:d1:52:8a:b2:c7:37:6b:47:f4:4c:3b:fa:93:48:
36:6c:b2:fd:be:d1:15:6b:6a:ee:bc:5c:b3:26:80:c5:0b:3a:
5b:f4:e3:db:21:f3:65:9a:44:75:5c:76:6c:13:ac:61:54:1f:
b9:8b:38:0c:a2:6a:a3:c6:28:5a:16:62:5e:9c:07:f9:2b:20:
ea:6f:c4:40:9d:19:7d:5a:fe:92:02:91:a3:a0:27:d8:33:48:
24:9e:1b:b5:89:3d:26:d8:a7:b1:9b:56:28:9e:a9:53:f8:0b:
b2:cd:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:31 2025 by rpki-client