Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: UgD7977BTX7sOkfEUwGScwn9hQtlRUJUnx2PdVsIHxE=
Subject key identifier: 6C:14:8C:5A:A8:44:AA:FB:31:AC:2D:97:14:B5:2F:6F:5F:6A:49:F7
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0198CBDD9F2D5B32F57AE8CC41E78C8FD6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1645
Signing time: Thu 21 Aug 2025 09:02:35 +0000
Manifest this update: Thu 21 Aug 2025 09:02:35 +0000
Manifest next update: Fri 22 Aug 2025 09:02:35 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: IdPauGRR/60TAP0PCNX4DTuidP6ox+SK7tyvN1jxl/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:dd:9f:2d:5b:32:f5:7a:e8:cc:41:e7:8c:8f:d6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Aug 21 09:02:35 2025 GMT
Not After : Aug 22 09:02:35 2025 GMT
Subject: CN=6c148c5aa844aafb31ac2d9714b52f6f5f6a49f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:17:24:93:fd:16:94:26:51:49:d2:61:10:
69:c3:1c:12:a1:18:4a:d6:e3:39:b1:1c:f2:92:aa:
0f:7b:df:b8:7c:78:a4:5c:f2:68:14:a5:48:20:a6:
98:00:18:5f:c4:29:15:dc:79:a0:aa:4b:86:d8:84:
ba:6b:4e:13:a1:47:f1:60:b3:bd:db:f4:db:69:1e:
eb:b4:bf:fc:19:c3:f3:a5:b0:96:52:25:6e:a0:6f:
59:cb:c1:8e:4c:52:7a:e1:7c:1e:1c:4d:6a:bb:e7:
15:71:4f:93:f6:1b:e9:a2:e0:f2:c5:85:87:51:ee:
44:92:f8:a7:37:cc:fa:db:92:ed:3e:9f:46:85:50:
d7:a4:89:4e:4e:7d:f2:52:d1:d7:29:31:bc:40:c1:
d3:bd:fc:66:c6:d6:4e:69:70:03:49:75:4e:1a:c5:
50:bf:01:b6:66:00:ca:45:80:2b:e6:cb:c0:dc:41:
64:1d:c1:f7:67:b8:aa:2f:bb:cc:92:91:cb:9a:03:
53:75:c5:6d:30:54:db:81:e0:a9:2d:f1:ce:93:3f:
17:65:c4:02:75:78:91:e2:bd:8d:03:b8:95:e3:7e:
ff:ce:e8:bc:2d:5d:8a:83:3f:65:fc:33:db:96:e1:
af:01:7a:de:ae:8c:da:50:11:21:22:fa:07:09:d2:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:8C:5A:A8:44:AA:FB:31:AC:2D:97:14:B5:2F:6F:5F:6A:49:F7
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:ac:fe:a7:d4:ee:4a:c7:c3:4c:65:3f:18:19:c4:f9:76:
f3:43:6f:53:fa:68:23:4e:c4:dc:47:a1:34:7e:dd:fb:a4:49:
bb:6b:b0:a3:b8:f9:1f:b2:2d:71:d3:df:d4:a3:f8:53:58:ed:
c4:39:c5:bd:c2:6a:c1:bb:cd:76:ee:57:ac:9f:c1:0a:be:fc:
78:35:6a:f0:ed:ef:f4:28:25:69:22:f6:b2:76:ee:2e:99:57:
5d:85:07:11:b3:a1:3c:45:93:b8:9a:3d:6e:f1:9d:60:93:61:
f3:2a:34:b8:15:45:c1:d7:d6:36:31:b9:09:6c:5d:a0:b6:22:
2d:09:d1:b0:b6:68:c0:46:ca:e9:1e:e8:10:fc:44:8d:7b:b4:
24:0d:82:a0:5f:c7:8b:1c:e4:a9:ec:c4:c0:f6:1b:48:93:b4:
1d:48:c4:d3:c1:5b:02:02:38:44:32:df:39:a4:eb:f6:02:76:
ff:37:3f:20:4a:bb:81:22:d4:ac:50:83:14:82:03:38:9b:17:
b9:16:93:c1:eb:7e:bd:5c:60:c7:f9:fe:e1:1c:32:24:89:9d:
19:b4:f7:05:96:70:03:05:c7:ee:90:c8:6e:1b:12:3d:ad:ad:
61:07:e0:4b:42:09:ed:ca:52:20:d9:ec:88:b3:20:b7:4b:d6:
d1:91:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:51:01 2025 by rpki-client