
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: 98otaePxCd7ENGKBW8lErJMCvqHLYS77gZk1e5D96kI=
Subject key identifier: DA:5D:62:62:3A:42:7F:89:14:6A:76:C1:85:49:FE:C8:8F:EE:BA:45
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019918093DEB57E0760F42E1BB99EC621872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:22 +0000
Manifest this update: Fri 05 Sep 2025 04:01:22 +0000
Manifest next update: Sat 06 Sep 2025 04:01:22 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: USoFfLSp9Fm29s/8I154ZEYGIhWVTi3eUOLBaQq1qSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:3d:eb:57:e0:76:0f:42:e1:bb:99:ec:62:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Sep 5 04:01:22 2025 GMT
Not After : Sep 6 04:01:22 2025 GMT
Subject: CN=da5d62623a427f89146a76c18549fec88feeba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:8b:ef:cb:1c:74:e2:67:3d:3d:ab:5b:26:
36:77:ea:04:e2:71:0a:62:90:b1:20:e7:0c:a3:49:
3e:58:0d:c9:c4:af:82:3e:8d:0c:19:c0:23:da:dd:
ed:95:6e:bc:b4:3e:7a:f4:98:e6:44:13:e2:26:9c:
2c:3e:50:a1:e6:35:97:4d:63:1d:9c:6e:50:fa:b1:
54:40:4f:dc:82:90:e1:f3:91:df:c9:6f:a6:25:93:
f9:51:1a:62:ba:eb:c0:2b:e3:74:50:9c:e0:b1:cc:
18:8f:f7:6a:87:eb:be:4e:6f:4a:53:f5:b5:fc:8f:
97:f1:cb:a5:35:15:69:59:fe:bc:56:ef:2a:0f:c8:
cc:3d:c1:6f:f8:d7:47:8d:b8:91:99:bc:35:8f:c5:
97:33:86:19:b9:7e:df:7b:be:81:f3:9a:e4:39:5a:
c9:64:7c:50:7e:19:20:cd:fd:ef:1e:75:f6:42:62:
c7:87:2e:9a:93:f5:e0:a5:b4:19:4f:36:69:16:1c:
e1:d3:78:2b:0f:b7:48:1e:0a:03:c9:e0:4c:28:52:
ee:a3:49:72:ff:c4:4f:96:3d:1d:2f:64:18:83:11:
de:33:0b:99:6f:7a:8a:4a:89:0b:7b:64:e9:cd:65:
9f:73:6c:49:56:05:c4:8c:f0:b3:38:a3:80:de:2d:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:62:62:3A:42:7F:89:14:6A:76:C1:85:49:FE:C8:8F:EE:BA:45
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:51:d6:9b:26:2d:96:ba:d7:e6:be:2c:03:b6:9c:fb:01:
63:4e:6b:7b:6b:19:ed:60:b5:8c:78:5f:91:0e:df:c4:20:83:
41:14:f4:2d:51:02:ce:9f:c7:c4:d0:e4:89:9a:94:c1:9e:8b:
b3:d3:c2:ab:af:97:4d:3d:75:9a:75:42:9d:5b:33:e5:aa:fd:
d5:44:0c:c7:c4:00:d0:9d:b4:d3:a0:11:3c:e8:bc:d3:c7:cf:
79:2c:40:af:2c:24:3b:55:0d:d6:9e:10:54:d8:af:07:1d:2f:
8f:36:64:4c:2d:a2:5c:95:45:57:1d:43:67:78:14:4e:fc:f9:
8f:cc:f4:e8:f5:54:79:c0:49:83:5d:89:8b:10:44:13:82:8a:
d4:62:fc:99:c5:2d:f3:29:18:a7:36:ef:0a:2f:97:90:99:7d:
73:47:6c:e0:9e:f0:10:c6:3d:ed:78:d1:2d:57:7f:10:58:a6:
72:4f:a7:15:3a:9d:ba:6a:f2:3b:45:74:c4:37:6d:a9:0d:68:
14:f0:51:a6:fd:dc:36:ef:d2:91:38:9c:60:80:16:ff:5d:c5:
1e:26:9d:2a:59:9c:65:c8:a4:e2:04:c0:e6:dc:d5:f1:c4:27:
5c:62:d2:9b:93:5d:c6:1c:d0:cd:96:03:49:d3:7e:9b:90:a2:
cf:9e:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:24 2025 by rpki-client