Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: HPCtr7N9SbVgkdEKag4T/fc8YF7O6yfuimYrHo3jsl8=
Subject key identifier: B8:89:FB:22:3E:1A:44:08:32:9F:20:EC:38:0F:37:AD:E2:B5:34:3B
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 01984AAEB5E1D65184218097A219E8CF69F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 0594
Signing time: Sun 27 Jul 2025 07:00:20 +0000
Manifest this update: Sun 27 Jul 2025 07:00:20 +0000
Manifest next update: Mon 28 Jul 2025 07:00:20 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: qtUVg0l4E0gfCjSnytNjRBSj9zM+Yemdpa3hENIN5do=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b5:e1:d6:51:84:21:80:97:a2:19:e8:cf:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Jul 27 07:00:20 2025 GMT
Not After : Jul 28 07:00:20 2025 GMT
Subject: CN=b889fb223e1a4408329f20ec380f37ade2b5343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:5a:08:b2:4a:e5:b7:51:25:1c:08:d4:4e:
20:26:10:04:0d:7f:cd:8d:5b:45:3b:f8:73:ad:93:
8d:4b:8c:b4:7f:91:13:6b:12:b5:42:2f:ad:9e:b7:
7b:32:4a:0f:20:df:02:a2:7c:4d:c6:41:7d:38:c9:
b4:c3:aa:07:15:f5:80:93:d5:9c:42:1c:aa:d1:14:
96:d5:86:bc:88:7d:53:11:c9:28:a4:f7:fb:bd:3e:
61:8b:11:ca:da:0f:59:ac:cf:0e:82:c6:84:66:91:
9e:74:6e:19:18:8e:ad:ce:6d:14:c6:c3:ee:7b:b6:
bd:8e:79:66:a4:4b:5c:33:71:d8:fd:6e:36:e9:f9:
87:0e:83:9c:e5:a8:60:40:55:6a:e8:cb:01:b4:c8:
8e:e9:f5:3d:d6:46:0c:7a:8b:6a:97:7f:ce:7f:d2:
33:04:77:53:13:36:73:6b:2a:da:a2:23:e1:cd:c9:
66:5d:ae:25:73:a6:a3:62:8a:32:d0:1d:3d:0b:c3:
98:d5:4a:fc:e5:78:9c:73:9d:ad:3e:9d:f9:95:b7:
7f:d8:e5:25:44:2e:50:36:ca:76:f8:74:32:ab:1f:
ac:4e:30:72:22:91:ad:bc:85:cb:b0:12:1a:b3:d6:
1e:f4:f0:c2:08:10:d1:96:6d:93:58:f4:5f:9c:63:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:89:FB:22:3E:1A:44:08:32:9F:20:EC:38:0F:37:AD:E2:B5:34:3B
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:8a:8d:f9:f5:c2:fd:45:26:de:8c:fb:96:b4:76:0a:ee:
22:39:33:00:dd:af:5a:a2:06:d9:27:c0:9b:f9:a8:e7:c4:4d:
15:0f:35:cc:93:ee:70:42:17:4e:51:bc:4f:98:75:39:7d:05:
ba:64:a8:84:31:23:07:2f:2b:5a:97:5f:37:8f:c4:8a:94:e1:
22:ea:df:bc:69:a2:ba:b0:4c:91:b6:08:fc:ef:05:10:c6:af:
df:93:42:e8:c4:21:1a:06:b9:49:53:56:af:d3:68:6f:38:2a:
24:ab:e6:f0:95:9b:0c:73:70:f5:59:b4:b4:da:fc:44:35:bc:
16:5f:12:d2:fd:dd:2b:04:02:47:43:75:14:fb:05:8d:91:51:
f1:59:f0:0c:00:80:bf:00:49:bc:1b:13:27:00:ee:ca:cd:62:
6c:98:84:bd:b7:72:00:b3:e4:d0:93:bc:16:69:51:f6:dc:94:
ba:9b:0a:0e:c8:d8:91:57:42:4a:d0:e4:e2:9d:33:68:85:8b:
ec:e4:e8:cd:5f:ad:dc:2f:db:0d:b8:0e:d8:20:2e:79:75:83:
19:5c:ce:17:4d:a1:0f:38:d9:5b:09:b8:fe:cc:1c:43:a4:08:
3a:fc:c1:f6:21:3b:47:51:8f:33:c8:24:7c:a7:29:59:d2:13:
5f:49:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:31 2025 by rpki-client