Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: aEbehLKEWOrWU8zAjKNHJ33TQCcJ/WVnriRS1pGNEio=
Subject key identifier: 77:7F:16:FC:6A:3F:21:30:C2:5F:1E:9D:F3:30:97:03:CF:A1:FF:8B
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 0198481BBE3FF001E91B1512DBA67A12EC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 03A2
Signing time: Sat 26 Jul 2025 19:00:34 +0000
Manifest this update: Sat 26 Jul 2025 19:00:34 +0000
Manifest next update: Sun 27 Jul 2025 19:00:34 +0000
Files and hashes: 1: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (hash: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=)
2: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
3: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
4: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
5: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: InwrJWUKFk/ik+HFngDPyZ4ExYT2V39KrN3U4Ex0rsM=)
6: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:be:3f:f0:01:e9:1b:15:12:db:a6:7a:12:ec:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jul 26 19:00:34 2025 GMT
Not After : Jul 27 19:00:34 2025 GMT
Subject: CN=777f16fc6a3f2130c25f1e9df3309703cfa1ff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:d0:2c:32:fb:04:3a:6e:a8:b2:35:74:d8:
18:bd:65:03:97:a9:d1:0a:92:50:ac:41:0a:97:8d:
19:4c:c3:eb:b9:7c:77:8b:79:83:79:77:22:91:aa:
2c:00:0d:85:f5:df:3e:ca:e0:bf:6d:78:84:89:7f:
5b:d6:33:6f:2f:71:bc:38:aa:ac:3c:09:76:00:1e:
65:10:cd:04:40:1e:7d:a0:7a:b8:f8:a8:af:6b:81:
ab:d8:42:7a:73:6b:67:d9:31:f0:34:46:0f:b7:2c:
c0:00:5d:68:7e:5f:80:aa:0e:c2:59:cf:03:00:f1:
5f:a0:ba:4e:06:44:2b:f9:23:3c:a3:1f:98:ab:a0:
78:6a:1f:e3:93:98:08:a4:fd:30:ec:a8:ea:27:87:
23:cc:1c:8a:a1:df:93:f2:f2:ab:d5:78:12:04:26:
47:7f:e9:ba:1b:50:48:a9:db:09:91:7b:50:ce:fc:
09:2a:f7:9c:63:ef:a9:da:6b:fb:f7:a8:c3:20:04:
19:c1:23:4f:f2:21:1d:55:ee:8b:3d:56:ce:5e:e3:
48:f4:5d:95:49:40:8e:28:29:ec:b8:77:1a:b7:49:
1d:7f:ae:69:c4:65:13:25:49:a8:0d:9d:3f:9a:1c:
67:00:b6:fb:d0:e7:a1:40:7f:d2:92:3b:d4:b9:31:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:16:FC:6A:3F:21:30:C2:5F:1E:9D:F3:30:97:03:CF:A1:FF:8B
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:41:fc:70:3a:12:b4:18:a0:a1:2a:4b:8d:39:4c:dd:bd:47:
ce:1b:57:79:bd:81:b2:eb:25:13:aa:b5:9e:e4:01:1a:18:f3:
5a:19:60:6c:30:55:d9:63:b5:62:63:ba:9e:d1:a0:9f:ad:7c:
91:ab:90:e9:bb:69:91:77:46:2d:4b:35:8c:b3:0c:e0:19:51:
6a:da:09:b4:f2:58:3e:c8:3c:06:c1:94:3f:39:7c:c1:a5:21:
49:6d:36:57:0f:89:82:23:75:9d:b5:e1:4a:a3:7c:ea:33:7c:
9f:29:6a:9e:b6:98:c5:8e:89:1b:a9:2a:c5:e8:84:09:0f:78:
e8:17:91:fe:1b:ff:d9:c6:7b:16:cc:6f:9a:fd:d1:d2:32:63:
5a:48:90:45:d7:b9:04:0f:f8:3e:22:1f:af:83:81:10:0d:1e:
5b:c8:b2:b7:e8:b4:67:cd:3d:f5:fc:1b:66:e9:2f:d0:3e:1a:
91:a2:37:d7:7b:47:30:2a:80:d4:ac:11:f1:4a:44:c7:a3:d8:
e2:5f:26:24:2f:5a:fc:e8:ea:ef:eb:e7:c6:fa:c1:9b:0b:50:
6b:af:cb:c1:68:eb:b2:bb:ef:ad:51:e8:dc:ad:3d:e1:9a:eb:
9e:08:70:cd:a2:40:03:14:6f:53:2f:f9:54:ff:36:56:1b:dd:
cf:ae:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:11:48 2025 by rpki-client