Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: 3T7b87dJSV5Nep+TLsvLU5HnUel0ws3lpro1zucrRgk=
Subject key identifier: F4:93:EC:62:8F:A3:82:61:1A:57:44:8A:22:C4:5E:1B:16:D0:D4:87
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019927B3123FF976C147978D5190F64B9B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0647
Signing time: Mon 08 Sep 2025 05:01:10 +0000
Manifest this update: Mon 08 Sep 2025 05:01:10 +0000
Manifest next update: Tue 09 Sep 2025 05:01:10 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: WoENsCZ8XGDTRYewkz7vt1kE+gYhX4ilZhz89JbfKV8=)
2: rnjXuQ1jvIZtd3ofdSDvAnJTdh0.roa (hash: 0BWjtnz0dvROb8BSYgsrsPvNfL11ilpff5syBRFzFkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b3:12:3f:f9:76:c1:47:97:8d:51:90:f6:4b:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Sep 8 05:01:10 2025 GMT
Not After : Sep 9 05:01:10 2025 GMT
Subject: CN=f493ec628fa382611a57448a22c45e1b16d0d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:67:51:1f:02:88:1c:d0:49:59:33:1c:84:
cc:6d:aa:a3:c3:84:5e:1d:1e:d5:02:95:14:75:d8:
0e:7c:12:26:17:4a:69:b8:5f:46:c8:37:1e:2e:2b:
ac:cd:a1:d0:2d:b7:eb:4f:01:59:68:3b:9a:74:38:
17:25:d8:2f:4b:dc:0c:38:01:0f:b5:06:4a:bc:fa:
f6:1b:cd:5f:b0:6a:0a:9d:40:4d:65:72:3b:31:04:
24:21:cc:9e:0e:88:0d:b6:78:af:52:25:5f:e4:4b:
9c:69:20:cb:80:4b:f8:d3:25:ea:12:ba:62:0d:2f:
f6:21:fc:2b:93:f6:b2:03:90:b8:ff:bb:bd:50:5b:
4d:b1:fd:f6:66:8a:33:74:ef:4d:7b:95:b6:4a:8d:
85:ad:8c:53:4e:e7:c6:08:d3:4c:90:e3:15:9d:8a:
a0:14:a7:f9:20:62:fb:23:cb:0c:52:41:54:b4:f8:
49:79:73:f9:84:c4:a5:a6:b3:75:47:1a:e6:52:72:
b0:12:3b:45:a0:b0:21:ad:31:ac:b7:92:dd:d2:1c:
4b:93:76:6f:d5:7a:8d:bb:f4:5f:b3:02:9c:4d:92:
fd:bd:a5:45:b9:3d:7e:25:db:c3:d7:06:18:3c:c0:
99:5c:99:ce:10:b8:43:41:2d:f4:8f:fb:f1:54:1e:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:EC:62:8F:A3:82:61:1A:57:44:8A:22:C4:5E:1B:16:D0:D4:87
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:91:87:e6:b2:59:a0:90:69:99:87:3c:48:b3:b5:36:2e:
eb:00:8e:b2:19:c6:22:b8:d3:bb:15:6b:c4:3e:c2:ca:7e:08:
eb:8d:93:40:d0:15:69:4e:a2:6d:9e:25:5e:28:29:c9:63:3a:
08:5b:82:ad:7f:8f:10:5f:51:97:bd:e7:5e:53:cf:34:2f:14:
e8:bc:93:4e:fc:51:af:e9:1c:67:27:ca:08:55:21:4a:17:c4:
6d:f3:13:ca:70:93:cb:00:2c:c7:0c:93:be:52:99:fe:f6:46:
48:e2:07:18:73:50:72:fc:a2:11:8d:7a:ff:9b:f3:bd:bb:6f:
be:18:62:ff:d4:41:0f:75:6b:ea:d1:b2:08:fc:8f:df:09:ae:
1d:85:ff:93:47:13:19:9d:45:c1:b0:9f:21:44:3f:4f:7b:ab:
65:6a:0f:e2:60:0e:32:25:45:13:2b:bd:72:65:36:db:23:10:
75:16:aa:a0:b7:41:af:13:04:d9:a5:55:5d:68:82:e6:af:e7:
05:3d:b8:f5:6f:18:e5:8a:dd:7f:97:7b:8a:5f:08:8b:bc:32:
5b:9d:53:81:bf:53:ad:7d:4b:46:4a:1d:14:ea:3d:49:97:f3:
ad:73:45:ee:d1:6d:97:9d:21:b0:8c:9a:35:24:7a:d0:9a:c5:
88:84:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:08:27 2025 by rpki-client