Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: YpIQeJ+PKyLuf5qk7wFDhu8iDpxOItfJRiKV8QvNpjw=
Subject key identifier: 1C:98:03:7C:C3:07:4F:55:C0:90:CE:6B:F2:49:94:DA:96:E3:7D:E7
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01992857EF356AEF7710121282B0DDC55DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1606
Signing time: Mon 08 Sep 2025 08:01:15 +0000
Manifest this update: Mon 08 Sep 2025 08:01:15 +0000
Manifest next update: Tue 09 Sep 2025 08:01:15 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: GMSb13iHUidJCBS+RFQplDTqAF+phcFtgIlY3DsXgXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:57:ef:35:6a:ef:77:10:12:12:82:b0:dd:c5:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Sep 8 08:01:15 2025 GMT
Not After : Sep 9 08:01:15 2025 GMT
Subject: CN=1c98037cc3074f55c090ce6bf24994da96e37de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:e1:04:41:46:8f:b4:98:0d:61:ef:58:9b:
0c:67:ca:df:52:0d:8d:05:6a:92:3d:2e:4e:b8:3c:
ef:51:29:e9:39:ad:f0:0e:d2:c4:37:a0:24:e6:d0:
a0:7e:9f:c5:53:14:b8:f1:42:8e:a4:da:a4:b4:68:
a2:9c:9c:bd:22:af:b8:34:86:e4:df:03:bf:6a:52:
02:88:53:fa:59:d5:15:ab:7a:7a:b8:f8:e5:1f:5e:
6c:8d:a0:30:94:34:1c:0a:fc:7f:35:ba:5d:03:54:
35:ba:ab:3c:7a:ac:62:a0:20:dc:ed:16:a4:08:3a:
86:e8:d6:8a:79:a5:84:4c:d7:e7:33:db:2f:0b:8d:
5a:5b:e6:c3:6a:22:bf:b7:e8:25:28:32:db:32:74:
a6:c2:29:b3:18:c0:b2:a1:64:0e:93:b1:3f:43:a5:
bc:89:24:7f:f7:ff:db:c6:c8:a2:7b:fc:8a:01:7a:
2b:ba:ff:21:0c:11:05:f1:11:b1:45:82:95:d6:bd:
f2:15:d5:7c:35:45:31:51:4a:21:4d:12:25:b3:b4:
d0:65:43:d2:02:b9:53:fe:16:fe:07:97:39:83:cf:
f5:b9:94:be:1e:1b:f4:3c:cb:f4:e0:17:d7:a4:36:
74:54:c7:46:b1:6b:dc:7a:ab:f1:6f:da:bb:b4:7a:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:03:7C:C3:07:4F:55:C0:90:CE:6B:F2:49:94:DA:96:E3:7D:E7
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:93:75:c9:ca:4d:eb:8a:3d:1a:2f:3d:81:dd:18:bb:83:3d:
18:8f:a6:c7:e8:b9:91:aa:ec:37:4e:6b:5e:d1:14:29:26:3b:
80:7e:8a:1b:e0:80:2f:14:b3:d0:96:37:5f:ef:36:91:bb:11:
8a:61:b7:c7:c4:3a:40:ad:4b:a3:71:09:c9:ed:21:29:a9:40:
e5:bb:68:c7:20:85:de:7c:77:0f:66:28:af:b8:1b:93:94:d5:
41:1b:93:2b:18:78:a3:53:df:7e:b7:96:94:0a:e4:d8:07:a3:
79:b0:36:43:8f:3c:53:2e:90:46:8c:3b:fa:46:1b:10:33:5f:
14:76:ac:50:73:45:39:00:e8:72:f0:56:e9:d0:81:89:3d:49:
df:19:d7:db:0d:e7:39:10:56:9d:c7:f0:e2:f2:ab:ce:69:c9:
f4:0f:77:d2:30:d6:0f:33:8e:d9:35:d8:af:ff:32:9c:d8:84:
cb:26:5c:ea:69:70:9e:55:cb:7b:9a:f1:fa:be:16:fc:2e:c4:
5f:f4:ed:6c:9e:b1:ec:2a:61:83:5f:21:43:86:44:a2:a5:a9:
a6:92:13:91:a9:4a:b5:5d:dd:39:3e:9f:5f:f1:68:65:84:9b:
ca:22:30:f9:9a:f5:02:94:a4:4d:f5:a6:bb:12:f3:07:19:07:
c7:ee:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:09:27 2025 by rpki-client