Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: qZlXdvTjVUCdZ95TuJwJ42DeykewguZaU+lEGv3WXlU=
Subject key identifier: E5:C6:A6:BD:F8:63:FC:7D:30:35:C1:83:0F:0E:5D:7D:67:C2:4D:06
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019848894C2CDF030FB3394D08F740AB747E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0C90
Signing time: Sat 26 Jul 2025 21:00:14 +0000
Manifest this update: Sat 26 Jul 2025 21:00:14 +0000
Manifest next update: Sun 27 Jul 2025 21:00:14 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: nHX129iWJAPUY1TOoCGk409ktvtf4VeZ8dFS3f767rs=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:4c:2c:df:03:0f:b3:39:4d:08:f7:40:ab:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Jul 26 21:00:14 2025 GMT
Not After : Jul 27 21:00:14 2025 GMT
Subject: CN=e5c6a6bdf863fc7d3035c1830f0e5d7d67c24d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:0b:51:c4:b7:a4:00:9f:5b:dd:82:88:c6:
4c:1e:75:fa:c8:20:9c:43:f5:43:d4:bb:92:8f:4e:
cc:34:7d:5f:8f:ac:c2:e7:4d:1e:0e:7f:1e:23:a7:
e6:94:a7:a4:c8:0d:84:42:ef:83:73:64:af:ac:6f:
e5:62:4f:26:49:fc:17:9b:04:5c:98:ca:bf:66:ba:
b6:4d:c3:67:95:09:05:25:c9:0f:11:5d:72:b0:29:
ff:da:1d:c9:0b:2e:5b:30:3e:14:c7:40:95:85:8e:
11:6c:8a:2e:6d:0a:4e:9a:2f:76:3c:99:dc:f8:4b:
9e:79:cd:14:10:d4:e6:39:2b:7c:b1:57:b2:eb:10:
07:e7:03:d4:1a:d9:69:e7:c3:45:1c:15:c5:b8:c7:
40:3d:c2:d9:77:8d:70:d5:f8:7e:d0:53:f2:29:69:
a7:02:f5:2d:7c:81:f9:70:b8:0c:9c:fd:bf:c7:e1:
2d:e0:4e:e6:e1:f4:cc:79:d3:9e:66:2f:11:3f:34:
d6:cd:d3:f5:04:21:0f:a5:9d:38:4b:44:f6:0a:78:
41:fe:24:61:75:a9:e4:4b:d0:2c:89:2a:33:b6:4f:
42:09:92:c7:1a:48:74:8e:43:13:8f:45:2f:d2:fb:
5a:5d:70:a8:b8:d0:82:4d:ba:d9:17:4d:9e:08:d4:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:A6:BD:F8:63:FC:7D:30:35:C1:83:0F:0E:5D:7D:67:C2:4D:06
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:a9:d4:f4:0b:91:ec:14:b0:a6:5f:64:46:13:ac:dd:db:
29:a1:21:0b:0e:83:20:b3:00:95:b3:3f:69:1d:7d:07:41:95:
bc:a4:98:2c:c9:31:8c:8e:37:f8:43:74:0f:0d:12:cf:c2:c3:
65:ec:9e:76:1f:c5:53:10:11:2c:54:fc:9c:d8:48:e1:aa:3f:
83:80:8b:7e:f4:24:49:83:9b:27:6f:a8:3e:09:c1:83:de:2e:
3f:a9:80:76:f3:3c:ea:5e:93:0a:05:a6:6f:b6:1e:c1:9e:35:
02:2f:a1:c1:41:06:23:f3:32:e9:9f:af:0b:e5:09:38:75:0b:
26:21:86:ec:ed:eb:e9:3d:08:75:34:a3:79:db:a9:f1:2f:40:
38:2d:9f:b3:f2:80:5e:0d:16:f1:96:93:a1:58:b7:40:84:c6:
87:b3:ad:bf:a4:f8:0a:b1:15:e8:4f:8d:78:f2:a6:f9:ca:51:
0c:cf:7f:98:0c:8f:5b:6c:26:08:60:54:2d:42:73:6f:64:fc:
c9:35:f0:b3:00:c1:99:94:70:64:0d:b5:d6:04:d2:42:71:57:
4b:93:79:bd:2d:44:48:d1:71:b9:1c:b2:d0:fd:a7:5a:26:3c:
5d:f6:1a:6b:63:0f:5e:89:2e:4e:c6:d7:7a:8c:ca:cb:29:a0:
a2:ae:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:10:31 2025 by rpki-client