Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: +eZrZimM8uz38U9k767lrO7bqWq4mZxgrBkCwnkNUpc=
Subject key identifier: EC:B8:AA:E2:3E:6F:29:B7:8E:33:D4:6E:32:B4:94:1D:0C:70:E9:17
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 0199221EF71C77A8879B8083A52F58BCC23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 0280
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: oPy25aGyi0qg6VqjF73LXiKTzS6UQolzHNAMPuY17hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f7:1c:77:a8:87:9b:80:83:a5:2f:58:bc:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=ecb8aae23e6f29b78e33d46e32b4941d0c70e917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:b6:a0:d4:f5:0b:98:e5:0b:03:f9:9d:50:
91:ac:d0:7b:c4:eb:18:ef:18:ca:ff:ff:ce:55:e6:
35:10:bc:e6:b1:27:62:71:f4:b6:69:8f:52:70:5f:
b7:ce:ab:93:15:ad:a1:57:0a:18:9c:4d:dc:5f:23:
89:c7:9d:97:ae:90:5a:72:f1:16:5f:dd:3c:6d:65:
44:c9:a7:d5:5c:db:23:26:4f:cb:d5:a4:9a:b6:10:
f1:b2:f2:db:71:61:2a:5d:d0:d1:33:41:d0:75:57:
68:5f:64:91:65:f5:2c:2e:e1:8e:b9:ab:bb:11:38:
10:53:9c:5c:5e:e8:de:9b:58:00:e0:32:5f:f3:c7:
95:a4:99:f9:26:38:18:62:79:14:50:a0:1d:d8:c2:
61:a7:a6:c9:0e:e4:2e:e0:3d:80:ba:88:43:c0:27:
56:ec:36:0b:a2:4f:86:7d:75:c9:90:3e:48:0e:62:
24:7d:0a:97:ca:6f:7b:f8:6c:3e:a5:2d:a7:7e:fc:
7d:6e:74:0c:39:9a:e4:23:f3:81:69:84:0c:cf:ea:
a1:fc:b1:48:77:0f:1f:4c:1b:d0:93:99:76:31:8e:
83:60:c4:3d:2a:a7:1d:1a:bd:9e:78:f6:1b:53:64:
32:4b:5e:20:e8:ce:1f:a5:c6:00:74:ae:3b:03:36:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:AA:E2:3E:6F:29:B7:8E:33:D4:6E:32:B4:94:1D:0C:70:E9:17
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:00:01:91:7f:49:55:8d:b4:fb:69:ca:ef:e5:be:27:be:
41:25:0c:f9:6a:79:52:9e:cc:3b:69:5e:06:bb:4e:26:97:f6:
5d:2e:68:36:02:a1:72:c8:88:b9:e2:b5:9c:ca:bc:2b:3c:de:
f0:74:a3:58:12:7a:59:1c:c0:25:df:29:b5:b9:b4:6b:52:6e:
06:58:8c:d7:f2:c4:17:32:24:b8:ff:c6:25:01:5c:a6:2d:41:
49:a8:c3:32:43:a7:65:38:4d:72:11:12:14:8b:14:28:50:3e:
a6:e7:88:4b:5d:85:10:25:f0:14:b4:ed:d9:fb:2f:96:27:ac:
10:fd:8f:00:74:58:20:ab:62:da:ac:cd:a0:54:cb:4e:0f:0a:
fb:64:7d:ba:c5:c7:51:f9:41:0a:fe:be:b1:f2:05:6d:99:9a:
aa:ae:3d:8e:be:a0:c9:a7:a8:49:3c:6c:c9:77:ff:47:18:b2:
6b:f0:ff:b0:c4:6d:91:6e:28:f6:bb:2c:ac:4b:9c:ca:65:be:
10:c8:d2:3f:6c:3a:63:67:bd:7d:3d:5b:6f:b1:24:85:15:8d:
a4:d4:06:32:9b:16:be:1a:be:b9:93:b2:20:77:8d:d8:c4:ef:
b0:f5:65:46:e8:9a:d6:89:dc:68:aa:f7:83:70:c2:26:0a:fd:
16:f2:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client