Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json)
Hash identifier: mrLkxilI1Muohp8bvdupOCjFPflPTJBr7dntB60cAGU=
Subject key identifier: 02:00:44:DC:F0:CC:BC:AB:2A:BC:6B:9C:D6:A7:3D:DC:AF:45:59:89
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial: 019921E7786E3D6386010A4FDD92BFA3EF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:41 +0000
Manifest this update: Sun 07 Sep 2025 02:00:41 +0000
Manifest next update: Mon 08 Sep 2025 02:00:41 +0000
Files and hashes: 1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=)
2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: mYr+zzk3XU6klkd2adDL4+bDeJALXSoLS3m1094yiIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:78:6e:3d:63:86:01:0a:4f:dd:92:bf:a3:ef:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Validity
Not Before: Sep 7 02:00:41 2025 GMT
Not After : Sep 8 02:00:41 2025 GMT
Subject: CN=020044dcf0ccbcab2abc6b9cd6a73ddcaf455989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:7b:84:72:52:cb:ed:6f:66:8a:e1:69:27:
fd:6c:35:d2:30:6a:33:c6:77:99:f9:a2:2b:fa:c4:
b2:71:4a:14:29:15:35:10:32:31:96:4f:fc:50:a7:
33:ec:f4:7a:c7:37:be:fa:ab:e4:8b:2f:69:b4:34:
31:70:db:48:6d:04:f4:02:11:c4:28:b3:cd:f9:01:
66:ad:fa:e2:48:d5:00:cf:b7:03:aa:00:c8:27:29:
4e:70:de:3a:ee:84:6f:b7:1f:f7:d6:80:e8:bc:1f:
ba:ee:01:05:68:39:2e:e2:b8:40:1a:71:e7:3e:dc:
24:3f:84:cf:2f:fb:06:8e:15:a8:33:61:69:c7:f1:
e2:6a:75:91:a4:f0:af:20:f8:59:44:24:3e:5d:dd:
a6:8e:93:92:20:e3:4c:64:26:9b:78:b9:80:d5:de:
ef:4b:71:35:f5:bc:71:8f:d3:61:ea:dd:b2:81:9e:
77:27:c0:c9:a0:5d:ba:0f:2f:06:5c:f5:80:ff:d1:
56:17:c4:16:e2:82:8d:6d:2b:de:78:47:ba:08:77:
83:02:ff:05:6c:c9:35:b4:9c:bc:91:b3:08:de:e8:
f4:74:91:e3:fe:f9:9c:d5:48:ea:b0:ba:56:2e:e8:
9b:df:20:56:dd:c5:a5:33:f5:68:2f:3f:a2:f4:f4:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:44:DC:F0:CC:BC:AB:2A:BC:6B:9C:D6:A7:3D:DC:AF:45:59:89
X509v3 Authority Key Identifier:
keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:a6:17:a5:22:23:fc:9a:0f:81:79:73:46:3f:9d:26:26:
9f:52:2a:60:f2:db:85:80:80:51:5c:1b:d9:05:85:5b:29:eb:
d4:96:5a:f8:ae:0c:d3:e5:55:6f:41:49:1d:fb:de:b4:cb:59:
bf:15:0c:7b:7c:66:63:ca:ce:c0:07:ee:aa:4e:1a:06:83:0b:
da:92:98:b8:01:08:9e:90:20:58:3a:2c:9f:83:a6:5c:cd:cf:
48:bf:72:a1:c6:c0:31:28:87:c1:3f:72:d7:e9:fa:e5:1f:55:
c8:31:8c:10:ea:83:a6:25:fd:c7:85:53:55:16:f4:38:97:64:
b6:fb:79:72:6f:40:4d:71:2e:be:08:63:54:04:28:19:35:ad:
69:61:a9:c3:28:01:13:07:33:97:75:34:72:06:9c:36:de:6e:
52:a1:c5:8c:34:04:a0:f7:d1:14:fb:e1:33:0b:f8:99:7d:86:
15:cf:fd:79:f5:0e:02:b2:1c:fe:d1:53:17:f5:45:56:05:74:
67:38:b4:33:35:c9:ea:7e:eb:7c:9d:62:2f:fc:1a:39:88:43:
54:fa:3f:ae:ea:2c:2c:4b:e8:6a:2b:a9:82:78:c3:de:bb:f5:
a0:f8:b5:5c:af:5c:b6:55:9b:f6:33:d1:0d:e1:87:a4:a8:00:
2e:74:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:41 2025 by rpki-client