Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: hdbMWaBUKHKNAN4gz1g/1siUqEmb5DsJ6JpR3yToQos=
Subject key identifier: 53:6B:B0:D3:D0:FB:F5:9D:0D:E4:AE:15:20:47:CB:ED:58:5F:52:CD
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 0199179AA9666876E278AFC9048D7FBDFDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 0604
Signing time: Fri 05 Sep 2025 02:00:35 +0000
Manifest this update: Fri 05 Sep 2025 02:00:35 +0000
Manifest next update: Sat 06 Sep 2025 02:00:35 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: uwStNrx/x09Vx8Kd6LPbhSv54hh/zumed1Ng1PgjyXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:a9:66:68:76:e2:78:af:c9:04:8d:7f:bd:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Sep 5 02:00:35 2025 GMT
Not After : Sep 6 02:00:35 2025 GMT
Subject: CN=536bb0d3d0fbf59d0de4ae152047cbed585f52cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:a8:a7:ef:02:65:53:4f:90:20:4b:cf:43:
11:e3:87:85:d3:d1:87:71:21:2e:3e:db:05:02:8d:
48:8a:4c:fb:f8:b2:fd:ee:ad:d0:c0:cb:20:6c:cc:
00:5f:88:b3:9e:13:aa:a7:e8:33:04:4d:94:7b:22:
10:0b:bf:22:34:76:b8:b1:71:06:e7:42:16:13:6c:
20:86:12:9b:77:a4:e1:ed:90:fa:94:0f:65:eb:5f:
be:de:b2:18:13:3f:eb:5e:0f:2a:2f:2b:ed:ea:d8:
75:55:27:1a:09:21:4a:91:70:9e:ea:7c:e0:b6:2b:
bf:88:07:87:9a:3a:6b:06:d6:49:b7:91:4e:f9:64:
e2:81:24:d9:3c:f3:1d:07:de:87:44:df:8d:d8:1b:
fd:cf:7c:0f:a2:57:20:c0:1c:8a:ad:99:8f:9e:1e:
e3:ea:8b:c4:8d:e9:be:05:d2:8b:ea:89:71:f5:a7:
97:d1:5e:c2:18:ee:16:ff:b1:c4:b7:b3:91:d9:31:
8d:17:32:9f:52:cf:51:b6:e4:04:53:12:8a:0d:48:
49:25:08:95:c5:5c:dd:80:70:2a:3d:7a:b5:01:2e:
70:13:cc:93:10:5a:dd:cd:d4:74:e9:32:30:a3:29:
5c:41:99:29:a4:04:39:34:60:15:f7:e4:b5:a4:f0:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:B0:D3:D0:FB:F5:9D:0D:E4:AE:15:20:47:CB:ED:58:5F:52:CD
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:e3:4c:a3:f2:95:45:5c:a9:9a:33:b3:cc:90:2e:ef:66:
7a:94:5d:7e:34:bb:bb:3f:ab:80:22:c9:6e:3d:2f:33:16:7e:
6a:24:93:f1:1b:07:17:4d:09:0f:25:dd:0d:84:3a:c6:bd:f8:
e8:87:8e:ef:07:bc:be:e5:01:38:0a:2c:08:9e:a9:07:03:9a:
fb:41:21:a9:86:a1:0f:51:ea:0f:5a:37:81:5e:71:a9:8a:59:
64:db:0d:41:72:10:63:97:64:87:b7:7a:f9:be:45:7d:e5:e9:
25:a2:c9:04:41:5b:c2:b8:96:f8:e4:95:23:85:60:21:ee:63:
61:94:5d:a2:1f:3d:b3:f6:c8:68:1b:09:4f:57:03:4d:f3:3b:
d9:37:3b:3b:d2:dc:4b:21:07:16:57:36:6e:c8:37:4a:ea:fa:
f9:98:ee:34:d7:30:66:fb:cf:e1:05:85:4e:6a:70:9f:02:0d:
dc:c0:4a:db:83:58:b9:9f:74:78:c6:a9:3b:f1:24:d4:90:73:
7d:2d:b0:dc:1c:43:9e:96:20:9b:17:fe:10:66:99:98:2c:8e:
f8:3e:0c:06:0d:c0:8f:9b:1a:88:83:82:4d:39:1f:f5:fb:3a:
e3:17:4b:3e:0b:7d:8c:0b:26:b2:aa:83:67:73:da:54:a7:fc:
29:72:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:33:07 2025 by rpki-client