Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: 9q4N5oacKaDr0Yd6zTt9I6DCU3ENIg5I9hXbFNnA3h8=
Subject key identifier: A5:74:4C:79:28:62:83:31:8B:28:38:ED:5F:57:17:24:4A:E8:A1:E6
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0198C6497B28608BB1BA5E2D1EE1B19D4E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 14F2
Signing time: Wed 20 Aug 2025 07:02:41 +0000
Manifest this update: Wed 20 Aug 2025 07:02:41 +0000
Manifest next update: Thu 21 Aug 2025 07:02:41 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: 3MBWorho6oR9FAPNEMfg5Ti0c+07cvgxM5R2oq5PZ+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:7b:28:60:8b:b1:ba:5e:2d:1e:e1:b1:9d:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Aug 20 07:02:41 2025 GMT
Not After : Aug 21 07:02:41 2025 GMT
Subject: CN=a5744c79286283318b2838ed5f5717244ae8a1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:bf:c3:48:45:48:5c:a1:6a:ce:7b:74:ca:
2f:b6:48:48:36:8e:56:ab:e8:16:5f:85:25:f7:11:
70:dd:1d:7c:6b:b7:9b:0c:ef:13:d8:21:f6:20:10:
81:78:2c:b5:44:a7:3b:2b:a6:72:ab:ae:4b:21:d6:
8a:8f:a9:22:cc:95:0f:b5:60:53:00:f0:90:dd:04:
87:4d:bd:28:9f:bd:b1:bc:7e:64:28:5c:08:f5:a6:
aa:d1:07:04:72:7a:ea:41:96:fb:9f:6d:79:32:49:
03:4c:26:09:53:16:eb:8d:e1:04:f9:77:11:e2:28:
b2:65:71:81:8a:8b:2d:0a:57:91:f9:15:e3:08:95:
f2:8e:0c:96:a3:a3:9e:6d:37:31:f7:d4:a4:a1:11:
67:11:15:d4:1b:49:d9:df:a9:51:df:1a:80:4d:6b:
48:c1:33:75:96:b3:54:8a:b4:89:23:49:d6:13:2e:
49:82:de:14:4d:2e:d6:49:f9:9d:2c:72:53:1f:f9:
19:d2:06:59:04:4a:c8:9e:ee:8f:a7:e6:44:fd:81:
1e:d3:d5:59:3e:99:3b:1e:98:af:93:9e:16:e8:83:
ee:9d:71:61:56:fc:00:39:ed:53:90:aa:aa:5b:ca:
9b:f1:be:22:cd:1f:2a:c1:9c:6e:73:4b:d9:46:76:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:4C:79:28:62:83:31:8B:28:38:ED:5F:57:17:24:4A:E8:A1:E6
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bb:e8:41:a4:7d:a9:01:3a:50:2b:eb:7c:7e:7f:e2:99:d0:
ef:34:27:83:7d:87:8b:20:e2:58:56:8e:77:57:83:da:db:55:
4c:82:55:58:c9:77:11:c0:4c:db:99:b2:49:0b:8c:b2:fe:ff:
a1:18:89:eb:6b:c1:84:7e:13:90:37:a0:16:5b:08:84:61:3b:
14:29:82:f8:ae:25:31:1a:fa:56:3c:bb:8a:7e:30:c0:b9:26:
7e:09:9b:86:29:e2:0d:45:af:fc:47:c6:db:77:27:e9:a0:83:
6c:17:9d:28:9b:70:b1:04:dc:39:40:03:0b:72:66:86:f5:b1:
72:7e:00:0f:c9:31:04:0f:a8:82:0f:42:72:e4:35:82:5d:0a:
e5:24:ad:e3:71:11:b0:39:45:77:3c:98:0d:0c:d3:35:7a:0f:
07:fa:bd:64:b6:8f:f8:88:e8:f6:e7:f8:08:e0:41:29:54:67:
3c:96:e5:f4:1f:a9:7f:ea:77:51:82:cb:bd:89:51:42:9e:32:
fe:25:41:32:97:03:4b:2b:f3:f0:36:8f:c1:4d:9e:cb:2d:80:
0d:e2:0e:53:a5:86:e8:43:9f:d0:e6:3d:c7:3a:75:04:ae:65:
0d:76:a0:e7:60:eb:44:75:12:4f:92:db:63:e8:c0:f7:92:c6:
0f:9a:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:12 2025 by rpki-client