Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File: uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier: ErJU6iC3pK3L4Mpa1uAaeo2J4ehG0WpVFa2BnIHwHlw=
Subject key identifier: 58:4A:AF:54:3D:DD:AD:05:52:31:5B:55:74:26:1E:8C:05:BE:37:3B
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 01992CD9521176F9101C41FB2C6FB7BC8481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 05:01:03 +0000
Manifest this update: Tue 09 Sep 2025 05:01:03 +0000
Manifest next update: Wed 10 Sep 2025 05:01:03 +0000
Files and hashes: 1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
2: Lmvz7UtyX1lXwrZFQxyw10f965g.roa (hash: vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=)
3: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
4: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
5: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: vWbTfvpOdcwTWDHR2H6utPp5M6k9iAtNbzJzisPlur4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:52:11:76:f9:10:1c:41:fb:2c:6f:b7:bc:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Sep 9 05:01:03 2025 GMT
Not After : Sep 10 05:01:03 2025 GMT
Subject: CN=584aaf543dddad0552315b5574261e8c05be373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:df:31:96:d8:05:87:7c:2d:68:91:f4:b9:
bf:70:72:1a:76:cc:3a:18:ae:01:08:90:3f:73:74:
27:68:7b:88:69:8a:6f:cd:9a:bc:85:85:9b:5f:a8:
19:fa:58:98:bd:65:e0:25:b7:dd:db:53:93:7e:18:
34:ba:64:60:b6:87:ce:d2:e0:02:38:f9:23:4c:3e:
43:7a:06:b1:7f:fe:f9:0c:f1:06:a4:dc:be:9d:e5:
e4:2f:d5:2f:09:fe:07:4f:0d:6c:53:39:a1:08:64:
20:c7:86:4d:38:96:4b:6c:c4:83:c3:40:fb:5c:66:
4a:09:3e:a8:b5:a7:c4:43:b5:22:92:01:ee:dc:5e:
21:13:7f:39:1b:9f:03:99:db:2b:43:38:88:68:a1:
1f:4d:20:91:ab:91:1a:30:a7:4f:d3:bf:a7:72:6b:
bc:e3:e6:f0:20:73:f4:41:24:7d:ba:2f:f0:0f:91:
41:8d:50:93:cc:d1:2a:4d:04:51:bd:db:f5:60:f3:
aa:97:82:d1:b3:e8:cb:a0:af:bf:01:47:4e:7a:e3:
c3:33:3f:fa:84:79:b1:91:be:ad:c2:cd:e9:0e:79:
fa:77:7f:b5:ce:9e:6e:ed:a8:2b:4a:22:8c:e7:df:
7b:b3:d5:07:a7:78:f8:8d:de:da:a6:ba:29:4f:9c:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:AF:54:3D:DD:AD:05:52:31:5B:55:74:26:1E:8C:05:BE:37:3B
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:bc:8d:ad:f1:8f:b4:2d:c0:69:dd:23:a7:64:16:d4:13:
33:61:f0:be:58:44:68:0b:a7:3b:fa:6d:04:63:13:23:df:08:
ca:8f:ad:93:d9:72:05:26:48:85:c3:4f:0e:a9:22:74:db:2d:
06:6b:7f:3c:01:0c:b2:f9:6b:50:66:45:a2:6b:a2:7f:07:e6:
97:be:b1:6a:10:70:ec:d7:66:ed:4d:ac:83:b4:e3:45:f1:98:
9a:42:7a:5b:f1:91:97:a0:15:a6:c9:72:49:c2:19:70:28:40:
8b:04:9b:c4:a1:3b:2b:40:15:8a:7f:b7:f0:ed:d0:01:10:38:
17:ac:a0:6f:3e:4a:0f:af:b5:8c:f6:e7:91:0e:a7:8d:63:75:
68:7f:a6:d1:f5:f8:dd:ed:bc:5d:f9:40:89:91:e5:16:24:ba:
24:f9:83:f1:53:72:b8:3f:bb:b0:da:bf:f3:bc:c9:64:20:29:
00:65:71:d6:28:81:ab:9e:61:ff:7e:ca:45:a3:16:fc:af:72:
c9:24:f3:9b:5f:97:9d:8e:68:81:c8:eb:d1:f3:9c:9a:fe:45:
5f:7b:37:2e:c2:4e:c7:99:e3:86:86:7f:a0:da:00:09:14:cc:
23:48:c3:19:11:e3:97:84:91:c2:b9:06:c5:65:04:6d:f5:f3:
b1:86:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:36:08 2025 by rpki-client