Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: gVogvbxvquaJTSV4R7aB99wS2HIcxZGcYMvlmCNo0FE=
Subject key identifier: 53:F9:DE:E6:96:4F:AA:0E:D7:B8:2B:F0:4A:73:65:A0:D9:DF:F1:86
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 019849658F3FEFE736D95CAA05A6B950E951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 01A3
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: PqCKLdnTrPp5oGhFBtZ37lPYXDg9r31hXZ4/sTlXW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:8f:3f:ef:e7:36:d9:5c:aa:05:a6:b9:50:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=53f9dee6964faa0ed7b82bf04a7365a0d9dff186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:fb:20:34:df:f6:08:56:c7:00:57:3d:2f:
3b:c8:af:2a:ee:d3:e5:61:40:79:34:30:6f:81:85:
81:6d:93:54:16:cd:54:66:c9:26:9d:22:9e:10:b6:
ca:dd:fb:61:50:8c:93:5c:fc:ea:a1:d8:46:30:04:
e6:37:a6:b9:69:63:98:47:57:d3:12:fb:f4:fe:87:
51:83:42:a4:44:87:73:73:17:02:4a:ce:a1:2e:b5:
69:47:09:15:a8:ce:a8:a8:9d:28:6a:60:f1:7e:ac:
33:a3:03:01:09:e5:d6:3c:d0:1b:02:aa:13:53:38:
6f:dd:4b:47:95:13:c1:e5:1e:95:3c:d0:a8:a9:cb:
7e:04:e4:56:4e:a0:c1:b2:36:0a:96:d0:e1:4f:58:
69:22:85:0d:00:12:dd:f0:65:7d:b8:f4:dd:9e:7b:
8b:13:a4:6e:81:22:df:a3:a8:95:25:6d:e6:14:41:
4a:c5:48:0f:57:6a:eb:2a:b6:63:d9:0a:c6:a4:a6:
02:ee:9a:1a:a5:12:a2:6f:bb:43:ce:5c:03:20:4d:
bb:35:d1:e6:3f:e6:54:f4:81:f3:86:d7:21:1c:f1:
0e:c3:2c:c8:fe:7d:bb:6d:28:8d:cb:ff:96:b1:fb:
d5:16:83:61:13:98:c2:07:29:7d:ce:72:54:ad:16:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F9:DE:E6:96:4F:AA:0E:D7:B8:2B:F0:4A:73:65:A0:D9:DF:F1:86
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:40:95:f2:94:38:04:64:ea:b9:b4:da:5c:54:d7:01:30:51:
8d:11:8d:3e:1f:aa:0e:c1:82:fc:3a:02:9d:85:6f:34:25:0e:
30:2c:2d:10:5c:4a:24:76:f6:19:d4:aa:91:7f:fb:cd:6c:8b:
8d:db:62:52:ff:aa:c5:23:c8:15:f1:55:95:9a:f4:d9:ec:d3:
35:b4:61:7a:46:67:33:52:f1:a9:99:37:0a:33:0f:c2:d7:d3:
f2:70:ec:f0:c5:b2:01:f9:2e:91:b7:83:4c:06:b9:06:f9:bb:
30:25:19:c0:cc:73:97:c2:9e:96:70:14:8b:cc:bb:c2:b6:00:
57:ff:6f:06:70:d3:6f:ff:29:cb:d9:a3:7d:04:b9:0e:59:17:
a7:7b:cc:ac:fc:43:e6:2a:4b:f2:6e:5c:b0:60:63:76:f2:0b:
c5:69:d4:b7:f8:a5:b2:6b:89:7b:8c:2e:d8:16:fb:9a:14:1c:
14:e7:4b:d0:1f:99:da:62:76:41:ad:3a:df:d9:6f:24:f4:c0:
73:8d:b5:33:21:61:64:02:cb:09:4f:e6:87:87:e9:48:79:df:
3a:f1:89:56:d9:69:d0:ae:f4:c0:27:f5:f4:c3:1b:88:1c:09:
06:3f:db:11:ca:93:08:3c:9c:b8:fe:4e:ac:7f:46:92:20:43:
7d:ee:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:21 2025 by rpki-client