Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: UDyXDzG6IJkAbeLhqBzPtbJQ4rT5Xr7txrMqpZgAm4E=
Subject key identifier: BC:03:AC:00:8F:9A:EE:D2:D9:24:08:85:87:62:57:1D:D5:53:5D:F0
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019853B1C7AC3EE176CED8060074C0DB7F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 1019
Signing time: Tue 29 Jul 2025 01:00:16 +0000
Manifest this update: Tue 29 Jul 2025 01:00:16 +0000
Manifest next update: Wed 30 Jul 2025 01:00:16 +0000
Files and hashes: 1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: qziAKW3Nkd4VDAZU1hTiuHbdpIXx++dT/OhPtyy23Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c7:ac:3e:e1:76:ce:d8:06:00:74:c0:db:7f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jul 29 01:00:16 2025 GMT
Not After : Jul 30 01:00:16 2025 GMT
Subject: CN=bc03ac008f9aeed2d92408858762571dd5535df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:fb:a4:1c:4f:be:56:5d:61:d4:0f:ef:f1:
bd:ae:13:e8:22:57:c0:30:45:99:32:50:68:28:b0:
93:d0:2e:d3:df:46:0f:d5:76:a1:11:da:52:4f:aa:
6f:a2:32:66:92:e3:a0:c8:e6:85:f2:a8:27:9d:f4:
f7:fc:d7:a7:6d:c2:3b:eb:ec:bd:24:25:58:83:7f:
bf:a5:cc:86:17:96:2c:48:ca:4d:9b:9a:c8:e4:d7:
c2:01:e9:13:2c:27:c0:81:34:85:9a:3e:dc:46:60:
71:d4:f5:6b:75:89:57:34:a4:fc:4d:98:01:51:e7:
23:f1:2a:b0:e0:8e:36:f7:e3:e5:99:98:e3:68:18:
86:05:2f:18:42:a0:28:cb:fd:9b:ea:a9:5c:d7:1d:
da:e4:2f:37:cc:90:7e:fd:67:f4:5d:7d:4e:05:78:
1a:1d:62:0f:9c:12:c4:85:7a:19:40:af:9f:b0:ea:
5b:50:1b:2b:8a:e6:67:2b:93:0a:4f:79:8a:c6:f0:
90:8c:dd:b4:81:98:aa:7a:f9:52:63:73:d2:96:e1:
80:ca:af:0b:4b:0a:6a:65:98:45:99:d7:bc:85:9c:
dd:cc:83:7d:53:5d:c8:17:34:2a:7f:3a:aa:24:ed:
9b:9a:64:a0:68:62:d3:bb:52:10:72:3e:12:61:21:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:AC:00:8F:9A:EE:D2:D9:24:08:85:87:62:57:1D:D5:53:5D:F0
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:03:11:c4:46:b0:00:ab:61:41:86:31:43:3d:e2:77:42:76:
a0:d2:3a:c0:8d:07:f0:29:4c:3c:c5:78:f8:3c:e9:e1:49:b4:
19:4d:29:a0:f5:ff:e8:64:9c:33:c7:7c:a4:70:1c:c5:4e:6a:
a9:e2:dd:a2:3c:54:5c:55:c5:16:10:9f:df:31:da:57:97:a1:
5e:1c:7e:d4:0e:36:31:4e:77:cc:ce:56:b1:8c:59:45:13:c3:
41:bc:a9:b2:85:cd:f6:d7:1a:da:4b:6e:24:07:06:50:2b:e6:
1b:67:d9:c6:14:b6:b9:95:21:f2:25:5f:17:c3:ab:54:f5:47:
24:f3:65:f1:89:58:2e:ae:f3:48:51:55:f1:55:b4:5c:5c:b9:
65:7c:50:70:12:5b:2a:b1:6e:cf:97:de:d8:5b:52:83:7c:46:
c2:28:6a:16:c8:0a:29:65:a2:84:4c:2f:3b:1e:a1:67:a3:6f:
c2:19:cd:1b:90:72:dd:97:63:b5:77:8f:94:24:41:6f:da:1a:
2f:b5:2e:77:f2:1c:06:ce:65:dc:c5:2b:58:2f:16:8f:e7:c3:
ae:e6:58:f3:ef:f9:c6:89:5d:73:2e:7f:6d:8e:4e:be:83:af:
96:46:11:87:96:45:73:d9:16:d9:bd:49:c9:f8:3d:8a:99:b3:
c1:c5:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:52 2025 by rpki-client