Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: g7nPaDC0vtsyx+WkvFz+hgLjvvLy+YQ9qrlBbKaW3zo=
Subject key identifier: 85:6A:54:84:55:92:9A:2D:2D:31:86:0E:67:EA:90:FA:CE:F8:94:F5
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019845886B9A839B6E8EF4012C1FAFB1A09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 0F24
Signing time: Sat 26 Jul 2025 07:00:25 +0000
Manifest this update: Sat 26 Jul 2025 07:00:25 +0000
Manifest next update: Sun 27 Jul 2025 07:00:25 +0000
Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: dTkSCQlN8TOYGMCKl57uovx1eX+4J8X2z2FO8jVupcg=)
2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=)
3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:6b:9a:83:9b:6e:8e:f4:01:2c:1f:af:b1:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jul 26 07:00:25 2025 GMT
Not After : Jul 27 07:00:25 2025 GMT
Subject: CN=856a548455929a2d2d31860e67ea90facef894f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:74:5d:f2:73:a9:ac:b7:d3:02:e0:62:fc:
33:ee:40:6a:47:a3:44:12:0e:4d:ad:0b:75:88:17:
d4:6d:60:58:10:fc:97:ee:4e:3c:ba:1a:dd:c0:92:
cd:fd:b5:b9:99:15:fc:85:69:ef:0b:68:15:df:ca:
00:bc:2d:eb:36:a4:33:fa:b6:d0:bf:c6:ce:a6:b1:
e2:d8:bf:39:91:da:5e:f5:14:9a:71:8b:78:1e:09:
69:12:96:9a:45:66:51:cc:53:32:3c:51:79:c8:a1:
41:30:ac:e2:13:59:60:14:66:1b:08:c0:3e:73:3e:
55:7f:f1:88:b4:23:94:23:bb:b2:fd:0d:0a:25:8b:
28:e4:ad:8b:82:99:7d:d8:61:88:f0:f0:1d:b9:1e:
c0:fd:3f:1d:0c:73:34:7a:8f:52:d1:49:45:46:cb:
d9:29:e3:cd:b5:49:27:7a:b9:2b:41:7d:e2:2a:2b:
c5:5c:95:c0:10:5c:c9:bd:b0:22:e9:d5:30:15:81:
1b:de:21:59:02:c0:75:d0:a1:62:7e:f4:dd:f8:9c:
a0:eb:a4:72:73:45:03:3a:59:13:82:f0:6e:14:c8:
ea:d4:a8:29:99:77:9d:78:16:74:4d:bd:38:f1:a4:
85:d4:51:8c:6f:63:f3:9e:cf:1f:f5:b4:19:8e:13:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:54:84:55:92:9A:2D:2D:31:86:0E:67:EA:90:FA:CE:F8:94:F5
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:16:9e:26:58:64:bf:57:9a:20:6a:b7:0e:e3:5e:17:81:
dd:54:c0:54:c5:81:4f:fa:0b:57:b6:4f:13:e6:10:03:3f:9a:
fb:97:f2:f0:d5:ec:d6:c9:04:50:e6:07:5b:1c:f4:2a:09:da:
84:f7:c9:9b:1d:ab:20:2e:ae:4a:c7:9f:b1:62:41:93:35:4a:
91:7e:14:6e:20:9f:55:e1:7e:5a:ae:f6:c2:06:30:ae:fc:5e:
9d:18:14:67:2f:22:ec:d4:26:3e:9e:bc:eb:21:c3:77:3b:3c:
89:d4:a2:63:31:58:10:f2:01:bc:08:50:b3:f7:51:a9:90:4e:
3e:ca:27:50:38:68:f6:8a:d0:0e:c9:32:3c:0f:71:c2:ae:9a:
bd:ab:46:6a:b0:f4:91:13:e2:81:48:a1:6c:9a:bd:7a:55:e9:
71:5d:19:33:eb:b5:a9:be:c1:ec:de:2a:25:90:0a:7c:1e:4a:
4c:65:ac:4e:fa:bd:97:94:9c:28:a9:6d:36:92:28:e4:8e:29:
de:0d:6c:30:5d:50:b4:9d:f8:25:9d:3f:d8:71:4d:69:1c:1a:
42:20:5b:6c:ec:07:cd:9b:7a:7c:e3:b4:ab:e2:4b:29:80:70:
22:7a:c5:95:a0:28:91:29:5e:37:52:fd:4a:20:31:11:ab:83:
f9:bb:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:22:44 2025 by rpki-client