Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: NwUmpicEC7B2f00M622nii7mZCJTu+3WJLkwwaVjTxA=
Subject key identifier: 31:4A:C4:AD:71:B3:87:69:33:6A:9E:15:B3:92:15:A3:92:3E:78:CF
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 0198469B265810E7C99433A847BDCBCDEA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0860
Signing time: Sat 26 Jul 2025 12:00:29 +0000
Manifest this update: Sat 26 Jul 2025 12:00:29 +0000
Manifest next update: Sun 27 Jul 2025 12:00:29 +0000
Files and hashes: 1: WLPv_kiHkV3foWtvEt3ca8XVjG4.roa (hash: 485f4Pk93SekykKHn/Aq62sR6+/AvJghjHie2NYKlhI=)
2: hcpelkMB3HLp2KFjx3F4u7p7QiA.roa (hash: 61+3xEVQzTEIYSViuJWqNAx3iaX+tJlcGs9MEnOKcRg=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: 0lD7YEwInARM7x56NPNOjlj5V7eX3FC12DzOLfuWV30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:26:58:10:e7:c9:94:33:a8:47:bd:cb:cd:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jul 26 12:00:29 2025 GMT
Not After : Jul 27 12:00:29 2025 GMT
Subject: CN=314ac4ad71b38769336a9e15b39215a3923e78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:c4:6f:3f:cc:2c:a5:bb:ae:9a:5f:ca:93:
24:5c:17:0d:1d:f7:0e:20:79:f8:7f:1c:a8:3f:dc:
f0:c5:03:2a:5b:26:ad:7c:ed:5a:59:ca:1c:f3:7b:
20:99:c4:a6:0d:18:4c:fa:05:55:cd:88:de:e5:46:
59:10:43:a6:0c:6b:a8:d8:0c:2a:8d:e1:e3:1a:3d:
1f:ae:0e:6d:6e:fd:7b:e0:b9:d0:4d:c8:cf:a8:b2:
e9:55:4f:c5:ea:84:ad:0a:77:a6:64:7d:ac:e5:85:
0d:4d:0d:64:f7:ee:71:6a:6e:5f:45:b2:3d:09:85:
3d:bc:de:19:f6:84:97:5c:81:4c:b1:d0:bf:d7:dd:
6a:0d:d1:95:c2:46:d2:5b:de:7e:f9:5a:be:c2:06:
3e:68:67:d7:6e:40:20:a3:24:3e:fb:06:2d:49:db:
a3:21:e4:aa:c8:3e:ec:e4:0c:f7:30:11:4c:8d:b4:
05:80:4c:07:06:fc:6d:8b:ce:76:48:60:08:94:0b:
d4:85:71:d3:70:d4:4d:ed:8b:92:1c:e6:6f:40:6f:
ca:9e:96:b2:36:08:13:d7:4b:c0:28:64:5f:f9:b2:
8f:04:89:2f:d7:9a:13:ab:f1:e9:6a:71:15:1d:9a:
44:ad:5c:88:f9:cc:d1:14:01:21:fc:f3:de:56:dc:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:C4:AD:71:B3:87:69:33:6A:9E:15:B3:92:15:A3:92:3E:78:CF
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8e:b5:b1:d9:ff:3c:04:02:92:97:02:e7:51:1e:b2:37:c1:
86:30:2c:70:86:11:57:19:0e:eb:36:62:6c:dd:77:24:29:12:
a2:ce:03:da:a5:ae:ea:97:c6:21:45:40:31:e6:f6:bd:0d:48:
d2:5f:7c:9f:85:ca:79:af:90:ef:7f:5e:31:ab:5c:75:9a:94:
85:39:87:ee:7f:90:f1:32:69:33:04:b9:8e:dc:7d:e4:ba:32:
e7:34:d7:0b:a4:27:0d:c2:9b:1b:39:15:08:f5:aa:59:94:9a:
7f:7f:89:cb:b8:17:fe:5e:4a:94:29:1a:a6:fb:c6:34:70:e8:
7b:78:23:21:df:12:e4:3c:27:a5:e7:99:a5:10:72:a2:f1:06:
8a:82:4a:95:62:0e:77:88:bb:1d:e2:1f:bf:67:0a:a2:ee:02:
1d:f0:a7:bf:69:db:2d:d0:03:b9:01:11:30:54:fd:90:03:a6:
8d:0c:25:2a:8c:86:7c:6c:41:e3:44:73:1e:1e:e4:b5:ed:9a:
73:fc:cd:4b:1a:18:7b:08:4d:a7:d8:03:19:ce:9b:1e:41:72:
4c:e7:81:61:49:06:63:59:9b:a1:07:26:52:bc:c6:be:7c:2f:
4e:61:04:75:b8:e7:34:55:c5:18:f4:27:35:a5:a0:f7:d2:fc:
7d:b0:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 22:03:48 2025 by rpki-client