Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: wilm0csx+bke1B4Uc+lPYZy8dQiqPR9wer63+NZyn9o=
Subject key identifier: 78:2E:62:78:C5:D2:37:03:F2:B5:53:EC:CA:63:CD:C9:EF:C5:F9:52
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 01984708FF4EAC588F4E92014145A4AF342E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 14D9
Signing time: Sat 26 Jul 2025 14:00:28 +0000
Manifest this update: Sat 26 Jul 2025 14:00:28 +0000
Manifest next update: Sun 27 Jul 2025 14:00:28 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: vqnsiyf3XoB2QJAVFHMPHlZY8d/CujS4u3zo9i5/Zrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:ff:4e:ac:58:8f:4e:92:01:41:45:a4:af:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jul 26 14:00:28 2025 GMT
Not After : Jul 27 14:00:28 2025 GMT
Subject: CN=782e6278c5d23703f2b553ecca63cdc9efc5f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:5f:34:82:5c:92:d9:7e:44:8f:68:27:af:
e2:f4:07:0f:58:65:78:a7:2c:de:20:c4:96:08:c5:
44:89:0d:a3:75:aa:c8:ac:1f:11:ec:38:11:48:4b:
94:16:c9:32:e6:9d:c0:35:5a:ae:81:9f:e0:f8:dc:
5a:a4:b9:a1:a9:87:20:44:eb:5b:74:3a:60:6c:5c:
a9:27:e2:72:ad:3b:87:ed:ef:4b:69:bd:98:5a:60:
15:ce:65:59:38:8c:e0:c4:8d:3e:e4:59:98:c3:4e:
5d:0b:34:e2:7b:6b:61:75:3c:9e:1f:64:9c:52:db:
09:2d:d1:e4:40:0f:81:c2:b8:b0:96:ae:ec:fa:78:
4e:cd:fd:28:db:d2:28:34:f5:3d:a7:6c:39:47:15:
21:ad:18:cf:fd:92:0b:a1:27:f1:1c:a5:b0:d3:a2:
af:69:72:70:fb:18:ea:b5:7d:54:06:10:7c:2f:29:
77:52:a0:fe:be:78:06:e2:4d:a6:50:34:95:89:6e:
63:45:de:80:a8:ca:5a:60:c9:53:b7:d3:81:78:52:
27:a5:c5:07:1c:95:a1:29:b8:41:c5:50:1a:08:f3:
4b:d6:58:cc:55:7d:36:84:db:22:5b:81:be:83:04:
08:96:d3:ef:35:78:c9:5c:c1:f8:21:5f:bb:3f:33:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:62:78:C5:D2:37:03:F2:B5:53:EC:CA:63:CD:C9:EF:C5:F9:52
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:08:c3:8f:4c:85:1f:be:54:96:25:96:98:48:2f:ad:30:9f:
9c:40:df:06:ab:97:ef:23:bd:d2:38:d1:8a:90:72:84:d0:87:
f4:5b:25:c4:32:0d:ed:f5:a1:b0:2c:db:45:56:07:e4:04:21:
96:98:ad:ab:3e:72:b9:6c:11:f0:6d:16:e9:cb:a8:08:ae:79:
28:ae:08:1a:7a:d1:d4:ca:e0:48:af:2a:11:76:c9:46:51:43:
0a:72:b9:2a:d0:9d:6f:64:98:3b:8c:03:61:ce:b7:65:ab:3e:
4f:83:b4:98:30:2b:00:a3:14:70:35:b8:1d:88:b0:8b:4b:65:
65:fe:0e:f3:5d:71:64:df:76:7c:83:7e:31:80:8d:23:10:85:
49:b1:4f:b0:ad:1f:ea:95:29:c6:de:4b:91:47:a6:bf:40:14:
a0:c3:6a:e3:5f:71:05:d6:00:ad:38:a8:6c:4b:6d:31:ce:00:
02:c7:a0:46:ec:f4:f4:25:5c:10:ed:f2:d5:5d:0d:99:d2:90:
71:85:19:ff:e0:44:f7:c1:46:d1:04:3d:7a:16:c7:9b:df:44:
c1:5e:cc:cd:47:6f:71:28:40:cf:39:c6:33:2b:4a:d5:67:01:
4a:91:fc:b6:c8:80:dd:e0:98:ec:8c:f7:fd:65:cb:e2:38:24:
25:5d:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:48 2025 by rpki-client