Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File: uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier: l5gG/foRtjdEwJYO+xFV0mjGz5L+98rFRbPIKrIWzII=
Subject key identifier: 36:0E:4F:AA:A8:36:DA:57:91:5D:DE:65:2A:09:24:4F:B8:18:A8:06
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer: /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial: 019921E7BB8AA597B127D1366729464796B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number: 0AF1
Signing time: Sun 07 Sep 2025 02:00:58 +0000
Manifest this update: Sun 07 Sep 2025 02:00:58 +0000
Manifest next update: Mon 08 Sep 2025 02:00:58 +0000
Files and hashes: 1: TGrXflCdfRfW3fIuk1M0sun1vvs.roa (hash: alNQcjpWXoWXc70x5wuOV0VaoVsG9NOJ3xbbbXJM7RE=)
2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: 2/9DMvliwH9ytRRBWPq11uwjfL2F+fF+Y5Tp4SY9KUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:bb:8a:a5:97:b1:27:d1:36:67:29:46:47:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Validity
Not Before: Sep 7 02:00:58 2025 GMT
Not After : Sep 8 02:00:58 2025 GMT
Subject: CN=360e4faaa836da57915dde652a09244fb818a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:e2:23:95:46:50:00:c3:93:be:ce:a0:22:
9e:9a:f5:50:1e:0b:a0:b4:25:ae:ed:65:c1:af:fa:
dc:fc:e0:ea:d6:ad:57:11:03:29:c2:bf:70:fa:62:
cd:90:63:49:78:7d:13:90:64:fe:90:29:cb:97:45:
c8:8e:3e:91:26:c1:5e:4c:04:ee:8f:b4:14:2d:b2:
7b:59:d0:c6:b3:28:4c:30:36:9c:7a:8d:33:88:c5:
03:32:ce:ce:34:c3:4a:ea:86:73:f9:93:a5:53:a5:
c3:d0:b7:de:5f:a3:eb:be:82:ae:d7:b1:ec:14:9a:
23:24:1a:ac:61:e9:6b:b4:00:b2:fe:69:09:f2:ab:
37:6a:20:c3:3d:11:b1:c2:cc:4f:e3:e8:cc:21:a1:
d4:d3:75:0a:2d:ef:0c:7c:67:c2:d1:f7:52:1a:af:
8f:b3:b6:ca:f7:62:39:c1:47:b4:d4:7f:28:09:96:
2e:77:15:8b:05:d4:dd:7a:a6:6c:a1:16:66:95:32:
51:98:47:2f:93:5c:14:de:ef:70:b7:42:42:d0:68:
1c:ef:50:2d:d5:46:c7:59:46:1b:15:7a:dd:3b:83:
98:e1:ef:0e:d7:72:3e:08:4f:c1:d3:e5:8e:4f:61:
da:75:e9:fb:6e:4b:77:da:85:34:14:00:a5:6e:5b:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:4F:AA:A8:36:DA:57:91:5D:DE:65:2A:09:24:4F:B8:18:A8:06
X509v3 Authority Key Identifier:
keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bd:58:11:20:5e:cd:7d:1f:f4:00:5f:ce:e9:af:33:9f:7b:
32:ea:7b:02:59:56:ab:1d:a2:95:07:aa:87:b0:76:28:c2:44:
63:1c:be:60:c6:6e:c9:77:a7:2d:82:bc:d0:0a:f9:a4:8b:8a:
b3:47:25:1e:f9:97:1d:a8:d9:75:14:d2:5d:21:c6:2f:4b:04:
b0:e7:58:03:ee:06:8c:81:10:e0:d4:53:75:4d:5b:71:61:8f:
4d:eb:36:ba:2f:9c:2b:f9:90:04:b2:03:f1:b0:d4:ba:a3:44:
cf:57:29:1c:d2:82:a0:51:82:8e:b8:2c:98:64:f9:e2:db:08:
e4:1e:ff:51:99:29:c9:45:31:39:9c:d1:6e:c6:cf:65:ff:e0:
44:f2:f7:53:96:7f:66:34:f0:22:a4:cf:18:37:96:eb:6d:e3:
d4:c6:b9:64:26:0c:de:91:ef:e1:29:c6:d7:c8:59:6b:69:fd:
71:4e:c3:52:df:0d:28:4d:b4:a7:12:65:0b:4e:3c:2b:da:6b:
3c:b9:d4:49:ae:0a:86:36:65:a5:25:f6:2f:e6:05:6f:42:b0:
19:c2:34:e6:94:f4:ce:6e:55:88:77:ee:7c:79:12:bb:f9:25:
8c:7b:d0:3f:83:91:eb:53:3a:8a:8c:1a:a1:cd:30:a3:63:7f:
e4:a4:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:08 2025 by rpki-client