Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: BJWXqpYBTmsZBwcjS6iuCHyFiv4Q/kGtAcIsFVrEYLQ=
Subject key identifier: D4:99:CD:C0:4C:33:0A:82:FA:ED:81:A8:D1:5B:B9:66:45:F2:62:B8
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 01984D427DC3E9383A2F2E02B53DC80DD5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 01AB
Signing time: Sun 27 Jul 2025 19:00:59 +0000
Manifest this update: Sun 27 Jul 2025 19:00:59 +0000
Manifest next update: Mon 28 Jul 2025 19:00:59 +0000
Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: jyn7AOxL+Kegmi6uo2oURnK3SM0YTAflBiM7Ao5W+N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:7d:c3:e9:38:3a:2f:2e:02:b5:3d:c8:0d:d5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Jul 27 19:00:59 2025 GMT
Not After : Jul 28 19:00:59 2025 GMT
Subject: CN=d499cdc04c330a82faed81a8d15bb96645f262b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:6a:e2:6a:e6:3e:cc:dc:90:46:63:55:5c:
b4:d0:db:5e:28:9b:74:54:ed:74:bf:60:83:5e:80:
cc:cf:05:d6:33:4d:b6:1b:ee:e0:dd:6f:9a:e0:dd:
90:09:38:07:4d:66:1b:a1:57:b3:83:79:8a:43:6a:
37:61:31:db:b5:1c:6c:02:e2:58:58:92:54:21:76:
d6:dd:17:dd:51:8a:91:34:c9:ea:c3:71:ed:0f:14:
d5:46:6c:74:1f:32:bc:28:3f:3b:d4:41:82:b5:62:
74:b3:78:1d:29:8b:bb:40:e5:2a:e7:12:4f:79:d1:
87:37:0b:aa:93:7c:14:6b:16:7d:93:60:a9:a4:f4:
b1:98:12:3f:f1:13:4f:5c:da:a8:5c:80:2c:87:0e:
04:d5:ee:18:02:fe:5d:d2:00:7d:86:7a:64:f7:b3:
70:29:fc:c3:96:f4:39:0e:4a:b1:2f:13:42:93:95:
e1:48:fb:98:90:e6:2c:b4:6a:54:94:37:8c:70:1a:
78:26:5b:99:f0:8c:aa:d7:a5:91:27:07:ce:4b:9d:
fe:a2:e3:30:7f:07:a6:50:34:6b:db:d9:1a:84:29:
5b:0b:01:65:4e:13:1d:99:7d:24:42:44:0a:89:23:
b5:93:93:66:bf:24:76:e3:71:13:8b:dd:9e:88:e9:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:CD:C0:4C:33:0A:82:FA:ED:81:A8:D1:5B:B9:66:45:F2:62:B8
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:16:59:9d:9d:f2:1f:9c:ad:a4:9b:a0:d3:c6:26:80:17:9a:
d4:85:ee:b5:aa:3a:c3:a0:a4:47:f9:0e:28:66:b5:7a:66:ac:
e3:33:19:43:4e:46:57:4d:e2:e4:8e:bf:2d:14:fb:3c:66:16:
79:bb:be:25:65:53:dd:7f:d1:34:b0:a8:13:3b:4d:c3:46:46:
f3:08:63:c4:1e:0b:5e:27:15:70:bb:07:ae:ad:90:a4:e4:8e:
5e:02:0f:06:dd:c3:d3:63:a3:69:3b:b1:99:23:a6:20:29:6d:
46:ec:ba:f6:67:0b:bd:68:60:d7:cc:04:c6:75:cc:54:8e:cf:
b3:82:86:9b:ea:c5:ef:58:bd:87:8c:7e:c5:ef:47:fc:27:05:
2a:70:9d:d1:04:58:ef:d7:b9:a8:73:19:46:3a:89:cc:2e:6b:
05:8e:2d:8f:b0:a8:83:82:79:b0:93:4a:e5:bc:1d:77:eb:d9:
9d:50:71:ed:94:09:fa:2a:d6:60:3b:38:01:8b:f0:48:f5:f5:
98:ef:6c:fd:77:5e:04:17:88:15:ee:28:85:42:1a:2c:60:9b:
73:0a:40:36:f3:64:1a:3c:8b:81:fe:41:0c:db:6a:03:4e:16:
03:57:a3:d6:97:02:50:08:5c:4a:9f:49:7e:df:f1:6e:33:56:
f3:59:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:20:24 2025 by rpki-client