Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: SncspFOhWDDhMpztGoMgLRCjsd5/sfkpADYukjrL2VI=
Subject key identifier: 8C:85:20:5A:13:8E:23:FD:83:5F:2F:19:B5:49:EC:1F:73:78:14:A1
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 019923D5DD56E3EA4ED75643CABE07A603C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0CDD
Signing time: Sun 07 Sep 2025 11:00:42 +0000
Manifest this update: Sun 07 Sep 2025 11:00:42 +0000
Manifest next update: Mon 08 Sep 2025 11:00:42 +0000
Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: a+tIxAtqRk5BRSdct4YYdHKqmMSfxNY48a/LgvuGLJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:dd:56:e3:ea:4e:d7:56:43:ca:be:07:a6:03:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Sep 7 11:00:42 2025 GMT
Not After : Sep 8 11:00:42 2025 GMT
Subject: CN=8c85205a138e23fd835f2f19b549ec1f737814a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:70:d8:73:8d:f8:d2:f2:bd:f8:a9:6b:37:
be:11:b9:32:e6:4c:81:3f:b1:75:a3:e4:7b:88:7d:
67:14:fa:dd:a5:31:1e:2b:a1:ae:cb:13:0c:cd:0b:
cf:ce:47:bb:d9:91:7f:5f:db:e7:9c:8f:99:b1:72:
e8:01:57:c8:91:80:fa:11:87:3c:6b:a0:69:92:82:
ff:83:34:f6:be:58:43:69:ac:38:fd:55:d5:3a:5c:
20:be:db:1a:50:50:f1:08:df:9b:e5:2c:f3:d7:63:
9f:8f:97:57:32:3d:86:19:7e:ec:9b:ea:e1:4a:25:
be:ae:f0:8f:ec:5a:f2:20:1f:0e:0f:a1:c6:09:26:
b4:63:ac:39:e9:2c:47:d8:42:cb:e6:71:59:ec:19:
06:df:e2:b8:87:b3:51:f2:05:b3:e4:42:b6:fe:1c:
11:08:07:24:fe:a2:25:81:d4:45:0c:23:85:30:2e:
7a:1c:4a:09:99:e6:7e:fc:e9:77:d3:4f:1d:ff:ef:
61:4a:f6:b4:db:22:cc:83:60:bc:9e:05:f7:93:b7:
6e:b4:16:21:ec:33:5e:78:a5:ad:df:04:b5:0e:1a:
ad:2d:f9:68:8d:4c:3d:34:96:f2:e8:a3:b6:97:45:
d1:88:9e:a4:ee:86:35:67:d8:93:95:c8:77:36:4a:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:20:5A:13:8E:23:FD:83:5F:2F:19:B5:49:EC:1F:73:78:14:A1
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bf:f8:8f:3d:5f:e5:0d:78:5d:ab:5a:e3:08:70:dd:31:50:
52:f2:40:3a:e1:ac:26:13:21:f8:dc:04:07:cc:94:dd:7e:d5:
eb:6a:3c:2e:01:6d:52:d7:a2:f2:9a:58:e5:ac:33:22:2a:b4:
3f:51:23:07:cd:9d:15:98:91:6b:9f:43:d4:72:28:9f:65:ed:
bb:ad:64:5a:9d:d3:a8:bb:37:03:30:09:da:cd:21:fd:cf:19:
1a:58:ee:4c:c3:0b:b2:5a:f8:97:71:36:37:dd:2c:d8:fa:3e:
06:06:d7:cd:4c:ae:1b:41:c3:a3:1f:4c:d1:d4:05:5d:3c:a2:
22:88:f3:dc:22:04:6d:ec:22:1a:f7:97:54:f8:e2:d1:a4:78:
83:14:7c:48:83:5a:a6:32:ec:7b:30:f8:b5:15:d6:02:14:46:
dd:d6:19:66:f6:95:c5:79:b7:19:5d:c8:a4:0d:42:b9:89:c4:
d5:63:8a:b2:61:3e:5a:88:2c:8c:15:6d:32:2d:09:09:05:d9:
4e:44:a1:30:6e:4b:48:84:e3:7f:f9:d2:60:b5:4a:ed:49:fb:
30:b8:4a:16:c9:28:b7:03:3e:11:94:88:d8:18:e8:2c:28:cf:
37:71:f1:0a:9f:28:f4:49:a6:f2:4d:c6:3e:73:ca:bc:ce:d5:
a7:4d:2a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:28 2025 by rpki-client