Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier: tN4Eh3axMM3EpNGmpK4r0A+w3z8hRMb81iPePbIg7pA=
Subject key identifier: E0:57:02:60:4A:FE:47:D9:E1:F0:D8:9E:CC:FD:13:DB:C4:5C:3F:8E
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial: 0199221F12C144FA97BD0655CA032F986EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:01:25 +0000
Manifest this update: Sun 07 Sep 2025 03:01:25 +0000
Manifest next update: Mon 08 Sep 2025 03:01:25 +0000
Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: HM5gQlMIg9xPnp9x08m2ddk7fj4WRTcoSUHWHb/a4O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:12:c1:44:fa:97:bd:06:55:ca:03:2f:98:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Validity
Not Before: Sep 7 03:01:25 2025 GMT
Not After : Sep 8 03:01:25 2025 GMT
Subject: CN=e05702604afe47d9e1f0d89eccfd13dbc45c3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:ff:ed:00:0c:8d:ab:d8:91:49:d6:a4:9f:
b7:6a:b7:08:7c:f2:8c:fe:70:34:10:49:1f:bb:91:
41:fd:50:1d:a8:a8:62:92:bf:5b:b1:5e:9f:f3:3b:
63:0b:68:7f:4a:fe:9b:09:12:8b:04:c4:55:6f:f7:
5c:18:b1:c5:dc:fe:d2:ee:27:2e:fd:86:26:b8:a2:
ef:3c:e1:5a:d6:40:8c:c6:ab:c8:eb:ff:54:62:e0:
39:1c:c8:3a:94:57:cc:03:02:9b:10:a9:8a:fb:df:
36:b7:cc:be:20:6a:51:e4:bd:c6:0b:0e:80:f4:ac:
da:2d:67:96:a5:40:d3:3c:aa:cf:70:23:f4:05:b4:
d1:0f:60:b4:1b:89:00:65:18:e5:2e:26:7a:ac:5c:
49:ad:2e:92:8d:1f:50:fd:85:5a:d3:b9:46:4c:f2:
8d:79:b8:38:d3:fe:46:c8:5d:8b:e9:75:1b:b5:9d:
39:07:38:21:4b:a3:a5:ed:08:6a:fe:22:7a:07:67:
72:18:8f:24:37:3a:83:03:8a:56:95:80:f1:24:96:
98:76:b8:0a:18:48:a4:c4:0e:06:e5:4b:45:1b:56:
9e:b6:71:b7:d8:38:22:4b:33:69:2d:a0:0c:7f:47:
ca:51:03:1c:71:7a:47:04:cf:e7:f5:64:6d:5b:70:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:02:60:4A:FE:47:D9:E1:F0:D8:9E:CC:FD:13:DB:C4:5C:3F:8E
X509v3 Authority Key Identifier:
keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:f8:bb:55:f0:ff:80:f2:d7:c5:c1:86:c0:dc:90:93:04:
b2:5d:c1:d5:80:b9:ee:6d:e3:9a:5b:26:56:13:84:cd:24:7b:
b4:e9:9b:3b:21:76:df:ec:bf:de:d1:37:fc:17:13:72:72:b4:
37:8e:df:9a:eb:9d:8d:6e:bf:5c:68:41:4d:c9:2f:5c:28:ce:
c0:e1:e6:54:3e:7a:f9:28:28:cc:40:91:e9:e1:ed:bb:9e:25:
d1:16:ce:54:35:0d:c1:19:f8:89:1e:bd:3a:5f:ad:bb:6e:7e:
06:55:35:e3:ec:c6:5d:17:88:5c:9a:34:0d:3e:97:eb:0e:49:
63:46:e4:91:b6:b4:06:68:00:dd:bd:b1:2b:80:93:01:13:00:
f8:86:9d:32:c5:af:0e:b3:29:7a:14:e2:e7:77:f0:6f:61:73:
02:86:d2:59:13:f3:88:a2:fc:4c:77:cf:9c:ff:36:16:23:51:
2e:14:ad:7e:c7:a3:58:be:f5:07:31:f8:f2:d2:17:0f:5d:88:
99:7a:bb:48:c9:4e:19:fb:7d:ae:04:fa:84:3e:cc:96:16:3f:
41:5a:a3:14:3c:f3:5d:d8:14:c0:ec:c2:e1:2f:00:47:c9:b8:
8b:a4:b1:d9:a7:a0:88:26:9e:28:34:cb:94:47:66:8f:35:86:
fe:40:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:05 2025 by rpki-client