Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: YwVMTXUnghzcE2POzM7p0Jv5tQ6oRk/K9fEyDCSFk/k=
Subject key identifier: CE:84:61:FE:10:6A:6C:DA:CB:E5:3A:4B:9B:36:45:DF:DC:08:D0:1F
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019844762AD73E15A8D3E6679B8BB2626731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 09D6
Signing time: Sat 26 Jul 2025 02:00:51 +0000
Manifest this update: Sat 26 Jul 2025 02:00:51 +0000
Manifest next update: Sun 27 Jul 2025 02:00:51 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: FXjl2FFkWeyZjc0Q5NnVdvfXVeBs/3q/NB4Ee/4gKog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:2a:d7:3e:15:a8:d3:e6:67:9b:8b:b2:62:67:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jul 26 02:00:51 2025 GMT
Not After : Jul 27 02:00:51 2025 GMT
Subject: CN=ce8461fe106a6cdacbe53a4b9b3645dfdc08d01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:80:e8:b9:f5:b6:f3:44:7b:1f:cc:be:44:
57:cb:28:5b:a4:e2:10:4c:8e:c4:bf:78:8b:f8:21:
48:7f:fe:ff:5c:a7:dc:0e:6e:dd:01:c1:3f:52:b8:
79:01:7c:d5:4b:94:ed:85:a8:e7:b6:fa:c4:18:19:
d3:3c:64:10:e0:d5:f0:5f:a9:c8:2d:ed:65:e3:87:
be:49:a4:2f:75:bb:0f:d0:44:13:ae:56:46:2e:52:
0c:3d:44:a3:12:57:8f:de:8c:20:ad:57:07:95:f0:
e4:d1:f5:29:16:b5:73:b3:55:28:52:1e:d0:66:cd:
19:05:24:fb:e5:72:a4:0f:28:39:f7:c1:3e:57:18:
94:2f:08:bb:0e:fd:44:31:cf:cf:7a:9f:d1:86:f0:
7b:13:04:2d:0f:5b:d0:65:93:00:12:69:c7:a4:3b:
43:92:fd:5a:96:ec:e1:aa:1a:cd:c5:97:89:6a:94:
e5:49:69:ab:db:8e:75:b1:b4:fb:ff:a0:79:6d:28:
98:2e:db:5e:f5:c3:01:1f:30:28:68:70:40:d8:00:
ea:63:2f:f7:42:26:33:7a:45:58:b3:e8:7f:26:e4:
68:04:c2:58:5f:cf:b9:5e:26:0a:6f:11:a4:9a:a4:
a9:b7:6e:e8:cb:92:6a:99:5a:ea:0e:64:b0:64:ed:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:61:FE:10:6A:6C:DA:CB:E5:3A:4B:9B:36:45:DF:DC:08:D0:1F
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:aa:31:80:13:0f:16:ab:e1:82:bb:c3:b5:b0:31:69:48:
c6:87:9e:17:53:85:99:ec:76:cc:84:0d:f8:b2:24:3b:0c:47:
87:aa:08:cb:af:ca:61:1c:ae:3a:6a:d0:cc:74:c7:6d:24:d8:
c8:e0:98:55:4a:9a:18:60:08:6b:4c:5c:9a:4c:80:41:67:82:
28:58:37:a3:ed:95:5f:64:a4:b4:c2:a4:38:68:d2:e7:59:cf:
b4:31:3d:15:bf:41:2c:c7:42:c9:ff:1a:9b:d1:cb:13:5f:5d:
3f:a8:f1:a0:25:08:86:6c:ad:6e:0d:04:71:52:59:6b:ef:00:
f0:19:35:c3:d2:9f:cd:bb:96:e5:29:77:9b:61:2e:9a:14:80:
b3:d0:4b:6c:88:f1:ba:dd:bf:d5:00:6f:45:69:db:bc:d5:57:
65:f6:bb:2e:ff:4f:de:c1:46:c0:9e:10:64:80:b6:6d:d4:f6:
2a:b0:b2:ee:1b:4e:35:f9:48:0a:9f:8f:b1:7b:c9:51:49:f7:
84:5d:72:49:b8:51:a8:57:1a:05:cb:b0:ab:bd:44:ac:fb:ed:
2e:bd:1a:8e:02:d4:1f:a9:a0:36:8e:ab:ca:0a:69:ea:ea:fe:
1f:06:54:ac:0a:ad:cd:08:0a:75:b4:12:f8:e1:bd:ee:d5:9a:
f3:c7:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:38:11 2025 by rpki-client