Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: sIIsFfkowtJlI8e4+czbkm9037zppvRF1M0p41heRDs=
Subject key identifier: 2A:29:25:25:15:41:90:4B:60:76:93:D8:44:DC:05:AF:0D:D9:8E:B6
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 0199228C4B603FF72ADC3A30C948D3821253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0DB0
Signing time: Sun 07 Sep 2025 05:00:43 +0000
Manifest this update: Sun 07 Sep 2025 05:00:43 +0000
Manifest next update: Mon 08 Sep 2025 05:00:43 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: eoxns+w49QhgzQY8k9/W8f9M8qY1rTHMUYxt2e6m4yA=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4b:60:3f:f7:2a:dc:3a:30:c9:48:d3:82:12:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Sep 7 05:00:43 2025 GMT
Not After : Sep 8 05:00:43 2025 GMT
Subject: CN=2a2925251541904b607693d844dc05af0dd98eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:68:74:45:14:09:c2:ae:d2:f9:2f:f1:f9:
dd:bf:68:51:72:82:d0:7c:ce:78:15:d3:9f:b2:37:
c6:4d:1c:18:a5:6f:c2:7f:62:f4:e7:eb:30:f7:a1:
73:7b:cc:bc:95:66:1b:5c:10:47:04:a0:8e:44:67:
22:b1:38:ec:78:f6:2d:f0:88:a9:5f:3b:17:05:37:
7f:d9:d8:29:fe:a1:12:59:07:76:a3:d4:e5:d2:59:
22:f9:04:65:60:6c:54:f7:f2:27:79:dc:9d:64:05:
20:23:d5:c6:47:9a:bc:91:82:e3:67:67:cb:65:0b:
b4:17:c7:d5:b3:7f:34:06:d2:aa:68:12:be:cd:aa:
fd:e5:2b:15:0c:8a:35:01:50:86:b9:65:62:9e:4c:
24:32:64:32:4e:9b:cb:29:6a:0d:30:56:63:77:bd:
f7:9a:43:91:ae:b1:4e:d9:ba:75:b6:74:4c:81:c2:
b3:ee:1e:81:a8:b5:8c:22:e3:77:d5:84:fb:74:42:
84:b5:3a:23:6c:bd:03:3f:ab:c9:d4:a1:c3:c1:1d:
8d:9e:19:09:75:85:7e:a8:6e:bf:ce:8a:12:bb:af:
b1:db:dc:6d:54:54:ce:42:77:dd:41:8a:37:14:21:
0f:f3:39:dc:f7:a4:6c:5a:3e:64:81:50:c0:ba:47:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:29:25:25:15:41:90:4B:60:76:93:D8:44:DC:05:AF:0D:D9:8E:B6
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:6d:5e:ae:80:af:7b:7e:78:96:66:8c:48:12:23:ba:79:
d3:bb:63:20:4d:6d:0d:fe:e0:2d:cb:ea:df:40:0b:72:0e:71:
59:35:52:32:16:59:0d:fc:18:50:98:9b:da:cf:21:ee:44:53:
bd:50:0f:56:9f:b9:de:a6:9c:ba:69:23:13:f8:12:a6:26:9e:
1c:44:84:0d:52:6f:1c:2f:95:26:7d:38:9b:27:f8:73:01:1d:
95:bd:a3:eb:3b:f2:d5:e2:2d:4f:d9:43:c1:50:f1:20:c1:4f:
06:82:b1:42:a8:f5:fa:b2:d0:27:35:83:2b:7a:80:ed:7d:d0:
47:29:9e:28:0d:17:6e:7a:f4:b9:e9:48:98:af:7d:5c:c6:d8:
50:4d:b3:94:cf:87:ac:2e:6d:d2:2b:82:74:f2:98:20:8d:4e:
98:1b:6f:8c:5d:b9:69:5b:ca:22:a2:94:e8:82:d8:f1:a2:f9:
ea:73:26:1a:71:4a:83:ee:5e:c1:85:05:0e:f2:a0:23:cd:15:
56:13:64:28:26:6a:be:8f:ef:95:77:53:39:7c:f7:8c:11:8a:
02:b5:6d:3a:4b:1d:5b:d4:a4:25:da:7f:ab:10:c2:20:cf:60:
ea:6f:1d:12:c9:c4:69:5d:1e:5e:69:f6:49:df:ad:09:ef:6b:
0a:8b:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:07 2025 by rpki-client