Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: 9KmQqBK1Inoml4mw3o8UAb/r5wgsSYsbb6c/tW5BkAU=
Subject key identifier: 0D:2D:0B:4F:3F:49:D8:19:44:35:67:6C:BE:E9:3E:F4:E5:E2:02:94
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 01984A09D20C30BA4337D08A6BF147511956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: RXTYLwVb2eE5eUwi1UpgLvBMw+N5tvZvOVacehgGIxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d2:0c:30:ba:43:37:d0:8a:6b:f1:47:51:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=0d2d0b4f3f49d8194435676cbee93ef4e5e20294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:dc:ea:a2:c8:af:51:64:8a:d4:59:42:85:
0b:25:c1:85:f8:35:58:d1:f5:95:26:b8:75:e2:04:
51:c0:3c:a9:6f:84:0a:cc:c4:1d:7c:31:49:c2:0d:
29:96:ae:27:c7:9f:36:99:4b:76:7b:98:35:a5:ae:
cb:6d:12:5c:f8:c4:11:eb:8d:0c:9d:d1:02:e0:85:
c6:b0:9e:6c:32:c1:37:b7:53:e3:cd:92:f3:fc:de:
76:a2:36:88:5f:95:d6:0d:70:70:fd:d3:60:0f:a5:
ba:8c:3d:59:d8:24:a4:b8:e7:cc:d8:46:40:8e:e7:
2e:b4:14:59:e3:23:d2:97:d7:86:c1:ca:92:64:fb:
14:09:02:6d:05:22:6e:8f:09:d1:4d:20:fd:d0:c1:
2c:c3:3d:ac:01:89:af:0c:ee:9a:a3:38:27:0b:a5:
70:52:2c:13:26:2e:1a:3a:fa:bf:a7:d8:d6:9b:9c:
59:e2:f3:f3:28:5f:03:33:3d:53:0b:2d:17:a4:2a:
a0:d3:29:b5:b3:5f:38:1f:74:a9:ab:22:cf:81:1b:
85:48:4e:9d:91:6d:37:64:0b:7e:b7:d5:2a:27:76:
3d:2f:3e:43:d6:ac:51:b9:dd:ba:27:9c:81:3a:aa:
fa:a3:dd:3b:a6:c9:f6:8b:52:e3:ad:31:37:3f:67:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:0B:4F:3F:49:D8:19:44:35:67:6C:BE:E9:3E:F4:E5:E2:02:94
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:9f:80:91:d7:35:3a:36:06:de:d9:3c:0c:5b:42:fb:86:b9:
fc:0c:a5:94:1b:65:66:05:72:42:47:5e:13:70:51:80:22:cd:
cc:27:5b:6b:bc:72:d0:12:93:81:4b:d3:35:b0:80:a2:f7:cb:
7c:fa:7c:87:23:b5:d5:18:03:f5:1e:11:45:01:b5:d9:52:eb:
86:36:80:3a:bd:4a:95:78:4d:73:a5:ee:c9:0a:94:e1:cc:20:
02:69:f5:36:41:65:01:ed:25:c0:2f:9d:5a:a7:ab:f9:5b:ef:
ec:8f:9a:7d:30:d7:a5:ba:05:88:cf:18:f1:90:80:bc:00:47:
90:78:3d:6b:85:78:63:aa:0e:21:51:26:2d:01:f3:39:7c:3b:
49:4e:1e:84:9b:ad:b9:8d:d0:37:5b:c7:b0:5c:9f:9b:19:17:
1f:34:64:26:41:73:a8:c0:f1:8c:89:53:e0:20:ad:58:d3:9d:
13:8f:09:1a:c5:97:29:72:35:26:83:87:47:f8:66:a0:99:1f:
a8:9a:41:0e:05:81:71:0f:fd:9c:bb:c5:31:c0:be:b7:82:ac:
5f:d5:bc:0d:5b:a5:d0:e6:08:68:ae:6f:e6:2d:f0:c1:a1:5a:
22:ac:03:d8:ad:20:f1:2e:73:bb:c8:4f:9a:92:20:24:c6:57:
45:c5:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:57 2025 by rpki-client