Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: +26E+MPpgGrXLFnhrxDofqvsSGDq+hFLBok3H3HmLa0=
Subject key identifier: DD:D1:FA:B1:65:56:DC:AF:28:24:A9:6B:89:6F:71:77:19:73:F2:0C
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 019928207DF78C1AB4229C4AEAF89921BE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 07:00:41 +0000
Manifest this update: Mon 08 Sep 2025 07:00:41 +0000
Manifest next update: Tue 09 Sep 2025 07:00:41 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: HZFFCIXN1LnBbegISwLD8j4Y2fdnLT4xyGxDxdiQfGI=)
2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:7d:f7:8c:1a:b4:22:9c:4a:ea:f8:99:21:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Sep 8 07:00:41 2025 GMT
Not After : Sep 9 07:00:41 2025 GMT
Subject: CN=ddd1fab16556dcaf2824a96b896f71771973f20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:5b:e7:cc:f3:57:89:ac:cb:73:ee:e1:1a:
a2:65:e2:cc:8e:c7:72:d6:cf:2d:3c:6e:de:b2:a9:
a2:88:89:5a:c7:4b:a6:93:21:20:be:1a:f3:22:3c:
53:fe:20:48:a5:74:0f:71:e2:95:91:78:dd:5f:65:
99:db:e1:d9:18:35:65:fa:d5:ae:50:b2:7a:fd:81:
5f:0f:61:ee:ec:6e:fa:4e:90:6e:09:98:94:ce:35:
c0:d0:48:0d:7b:f2:d0:46:94:c8:46:1c:52:fe:60:
0d:4d:ee:7f:89:a0:99:57:2b:fa:bf:14:5f:66:de:
d6:d2:4b:81:e0:6d:a3:1e:15:0b:48:a2:3a:66:ae:
81:44:15:66:d0:53:c1:35:f0:f8:43:ab:d7:7b:24:
37:6f:b3:3f:c1:26:c5:cd:76:29:dd:48:a8:85:a0:
44:3a:17:5d:20:af:41:6f:67:c2:f2:9c:d5:35:f3:
ef:48:93:5c:c4:74:eb:9a:eb:c1:ec:f5:73:8a:d8:
b2:65:c9:1d:82:6a:e1:ef:8d:9b:ed:e1:99:2b:95:
04:d3:20:03:56:1f:f0:6f:95:ea:75:35:1f:33:cb:
ac:06:65:9a:26:75:d7:e3:eb:9a:06:cd:15:24:05:
1d:18:98:4f:91:86:59:4c:3b:18:09:a6:24:f9:18:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:FA:B1:65:56:DC:AF:28:24:A9:6B:89:6F:71:77:19:73:F2:0C
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:71:e0:a1:28:5d:ca:49:fb:f6:20:28:86:d1:6a:be:4f:
c8:23:b5:62:17:ad:ec:0b:49:5d:ed:c3:ad:36:91:1a:3a:9d:
ea:b0:7e:f7:fd:65:a3:eb:e5:d7:47:3a:4c:10:93:2c:6f:60:
d5:a1:7a:af:32:97:1e:0c:35:7b:0a:ec:a8:83:de:2e:3f:1d:
34:b3:97:5f:0e:ec:1a:68:b0:e2:56:8d:ab:78:10:a8:53:b9:
53:c8:16:1d:91:60:db:41:14:8d:62:4f:5a:7d:ef:8c:a3:44:
b1:fe:64:9d:6d:f4:62:b2:be:a8:7b:b7:c9:e8:94:07:e1:b9:
89:c9:c0:6e:5d:6e:fb:47:87:d6:93:9d:9b:8c:3c:d1:9e:ab:
3c:9f:7b:57:df:a4:e5:b4:6b:7a:7a:f2:97:6b:31:f7:de:59:
01:20:95:39:f6:6c:2c:b8:1f:2f:81:94:95:cc:17:9c:4c:1e:
dc:4d:e3:2c:a4:82:2e:a9:04:0d:e3:a7:04:df:28:ec:9c:eb:
19:55:ae:e8:ac:24:63:80:a2:ce:54:fd:66:9c:9a:95:d9:df:
22:25:4b:e0:58:46:54:dd:d2:4c:c8:70:06:11:c3:bd:e2:ce:
ee:49:c1:41:0b:64:0a:01:23:a4:00:53:e6:6e:c2:03:9a:11:
65:21:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:11:17 2025 by rpki-client