Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: sogZhLe/HSkxmcc9gzQCi0FYFdqWMPZ3sM0nuVw1GYE=
Subject key identifier: 38:C7:39:61:31:39:12:66:0C:DA:32:39:FB:40:DB:F3:26:A0:F2:2E
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01983616C6386A6D23713BB99EFBFB898C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1604
Signing time: Wed 23 Jul 2025 07:01:58 +0000
Manifest this update: Wed 23 Jul 2025 07:01:58 +0000
Manifest next update: Thu 24 Jul 2025 07:01:58 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: dBYJI7j2cGLw4fhqCBNUEtA1T7+cHkf4GBlSdw+mBI4=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:c6:38:6a:6d:23:71:3b:b9:9e:fb:fb:89:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jul 23 07:01:58 2025 GMT
Not After : Jul 24 07:01:58 2025 GMT
Subject: CN=38c73961313912660cda3239fb40dbf326a0f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:da:c7:f3:32:20:af:ae:a7:8f:aa:f4:4e:
0d:4a:30:bb:4b:28:8c:81:60:3b:4a:21:c0:0e:ca:
af:f5:14:c0:63:da:18:f5:58:5b:61:db:b9:fb:fc:
d6:bf:c0:95:26:78:7c:67:f0:59:d1:9d:34:46:b9:
d8:29:a3:4f:c6:82:25:63:2b:32:27:96:a6:3b:d0:
42:01:e3:6f:f6:c4:c7:d7:c7:67:e7:5e:69:0d:5f:
0b:81:05:d9:9b:63:61:5a:24:10:06:84:14:9b:7c:
2b:f2:20:e7:fe:93:72:97:1b:5c:89:93:0f:39:57:
bd:10:27:b3:d0:49:c8:bb:44:87:29:02:01:d1:d0:
b4:c0:13:70:74:27:f6:05:8a:31:1c:8e:00:d7:aa:
05:cb:eb:da:6b:b2:4f:f1:d1:eb:c9:69:f3:d9:ff:
08:c7:04:69:50:c6:c6:63:f4:75:8d:06:12:62:87:
0f:8b:de:3b:0f:a2:56:77:e7:ed:f1:54:19:57:11:
0f:a4:d4:e5:7e:53:4b:b1:bb:b2:a0:52:cf:be:95:
f0:71:b5:55:2d:31:d5:b5:a6:ec:aa:88:7b:cf:e8:
49:0d:91:7d:81:05:59:68:2b:ee:8f:8f:bc:a0:cf:
ae:8a:b3:be:77:fb:2f:44:56:cb:77:e5:07:ca:62:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:39:61:31:39:12:66:0C:DA:32:39:FB:40:DB:F3:26:A0:F2:2E
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:22:e6:4a:83:15:c5:83:a8:51:c6:2c:9d:49:0a:b4:2f:
8d:bf:52:f8:2b:4e:aa:88:a0:72:2b:55:d0:22:74:ac:ba:8c:
70:f6:7b:66:9c:de:aa:46:42:52:a8:35:0d:3f:61:25:e6:07:
ee:7c:9e:5c:19:4f:b4:ae:44:ec:31:7b:8c:78:de:26:f9:f5:
0c:09:66:51:d4:4f:ad:f5:cd:b3:6f:ba:38:34:d4:d7:bb:48:
d0:9b:df:d2:ec:ed:da:05:e7:70:86:9b:47:0f:4a:3b:92:4e:
23:7d:a8:5f:79:62:8d:ae:68:b9:38:74:62:02:99:96:a8:46:
c7:7d:18:1d:82:eb:af:65:a0:5a:5c:c8:5d:9b:b1:5f:ca:9c:
f7:9e:34:d0:2a:3a:b7:22:da:58:0c:e0:5f:d8:ac:c5:9a:a2:
e8:d0:fa:42:14:bb:86:6d:63:8c:bf:c1:ea:ff:e8:29:56:32:
67:2d:8f:36:0d:a0:8b:2c:a1:82:78:a9:74:91:35:2d:90:b5:
25:80:49:e5:6f:9c:4f:4c:60:5d:4f:62:0e:9e:15:12:15:59:
95:43:10:71:04:dd:22:23:38:a3:f6:75:35:d0:1a:56:86:25:
18:f9:b9:68:7e:6a:9d:7f:5d:f8:6d:54:cf:25:78:b5:a0:63:
c2:bf:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:43 2025 by rpki-client