Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: BQJpHB/tf2uNZBifY4R9DYAWK2LFp1aocPDCrt+FTK4=
Subject key identifier: C2:38:15:4F:7A:32:EC:0B:F5:3E:AF:B1:00:3F:D0:F2:93:68:46:64
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019923A05ED82118498D1315071FA05EABAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:02:16 +0000
Manifest this update: Sun 07 Sep 2025 10:02:16 +0000
Manifest next update: Mon 08 Sep 2025 10:02:16 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: fxmQIHRq/KIeuIrIq8eSNqfd0fC3AJlfUz5Jpe7P0/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5e:d8:21:18:49:8d:13:15:07:1f:a0:5e:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Sep 7 10:02:16 2025 GMT
Not After : Sep 8 10:02:16 2025 GMT
Subject: CN=c238154f7a32ec0bf53eafb1003fd0f293684664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:b7:8c:e5:86:9b:3f:86:6b:cf:48:ab:2a:
33:83:3e:97:55:19:19:36:db:e8:6c:91:56:8e:b4:
d0:4b:eb:d4:76:91:69:42:d9:2e:3e:08:2c:8e:df:
a1:31:6a:ee:b7:45:74:cc:c7:db:e0:59:3b:e0:65:
0c:07:cc:ce:5e:bc:a4:d7:ee:14:b9:ed:68:63:73:
35:b3:e4:1c:82:74:9c:f1:73:28:78:32:91:6d:9d:
6b:b9:24:4d:ee:16:b6:11:62:4a:1a:34:09:9a:d7:
7f:5c:89:d4:d9:77:4a:c4:36:ff:a9:7d:24:47:70:
94:a2:99:e1:4b:6a:14:4d:13:ab:7e:37:66:97:aa:
ff:09:c7:96:48:8b:29:4c:13:3c:e1:e8:e3:d3:e2:
e2:31:5b:49:37:d9:1f:73:0e:6f:d4:af:b2:c9:f0:
d6:e1:f7:d2:4f:f7:18:ec:89:96:ba:82:c3:f1:51:
f8:8f:b1:c4:0a:90:9a:65:bb:77:14:9e:bd:2e:96:
40:cf:e2:e1:ec:7e:2a:0a:f5:7c:4f:b8:d5:74:13:
bf:57:9b:69:e7:88:1e:db:5d:78:8b:91:ff:77:f3:
1e:10:27:ac:73:f2:5c:3b:99:10:a0:ef:b3:70:e6:
6c:2b:d3:00:24:45:e1:ce:17:17:21:8e:1d:1f:98:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:15:4F:7A:32:EC:0B:F5:3E:AF:B1:00:3F:D0:F2:93:68:46:64
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9b:39:ae:84:8f:be:eb:a9:42:46:7a:0e:75:9e:66:5c:db:
6d:31:9c:4f:cf:ae:3b:e8:b0:46:24:61:70:06:96:58:76:bf:
af:77:8c:46:36:df:5e:ab:f8:31:4a:16:8d:33:00:f9:bd:60:
80:7e:fd:5a:3b:42:8f:52:72:d9:08:ac:3b:fc:c7:c8:94:6b:
e7:1e:fd:e8:d9:72:94:25:53:38:40:21:c0:03:3f:1e:80:a4:
68:6e:4d:46:cb:cf:3a:b3:56:08:6e:bb:bf:d9:45:59:3d:9d:
93:ba:0c:c1:1f:a3:98:f5:1c:24:79:8c:70:32:7e:8b:51:9b:
1f:15:cf:1c:c4:45:b8:8a:85:e1:d2:70:ce:38:71:9f:ad:59:
b2:df:df:d2:86:26:c7:7f:4b:c6:10:7a:90:da:9b:5a:1f:dc:
04:6a:e9:b0:4b:fd:ab:94:27:b2:6e:aa:1c:47:7c:ed:87:4f:
02:6b:fd:f4:ca:3e:28:16:39:8b:c0:63:0e:7f:32:f8:cf:44:
58:33:be:a2:0a:88:21:eb:e7:e6:b1:58:70:35:dc:27:f1:4b:
fd:11:0c:6b:84:00:40:03:de:32:ce:d7:23:ce:b1:54:2d:96:
b5:66:2d:24:48:41:52:d3:95:d5:f5:11:4f:1d:8c:f4:cc:eb:
54:6b:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:20 2025 by rpki-client