Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: cX2NBhwvGruO7j6Jk9MrQwRu2yo31cO0QoBWkMyOi8M=
Subject key identifier: 3C:79:2B:E3:07:F3:49:1E:ED:EE:7C:B4:64:F3:43:2B:17:BF:97:8C
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 01993047A5D45C4334595AAB3F7A1A535D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 041B
Signing time: Tue 09 Sep 2025 21:00:25 +0000
Manifest this update: Tue 09 Sep 2025 21:00:25 +0000
Manifest next update: Wed 10 Sep 2025 21:00:25 +0000
Files and hashes: 1: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
2: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
3: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: nZeoU1EUZ3QQkT8sqxy+gFUvDf2gVh3qZ7ziOEGF1Q4=)
5: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
6: ohgVS6vR-4SGEXaj_tFUb-UB3m0.roa (hash: FUu97z1QXGuNnK2gooake8eelYh7e6wKHA9hoFvMoKQ=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:a5:d4:5c:43:34:59:5a:ab:3f:7a:1a:53:5d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Sep 9 21:00:25 2025 GMT
Not After : Sep 10 21:00:25 2025 GMT
Subject: CN=3c792be307f3491eedee7cb464f3432b17bf978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:c8:57:8d:56:1c:f2:02:71:20:f6:7c:d3:
91:67:6e:24:77:8e:e1:14:14:be:4f:59:59:a7:f7:
5b:71:f8:14:00:2d:26:fa:78:ed:6e:ab:56:b0:23:
e8:af:f2:89:73:73:1f:47:a9:67:3c:09:ea:25:43:
10:ed:a7:29:64:60:ec:48:59:34:b9:1f:9f:4e:c8:
cc:cf:14:3c:74:9b:4c:b1:65:17:38:25:c8:cb:82:
0c:70:9f:c4:05:63:16:e9:1b:f5:1c:ae:96:56:b9:
53:41:ad:ae:09:08:41:2c:7b:dd:5b:55:cc:b1:75:
5a:e9:0a:d3:84:43:35:51:f5:33:c9:a0:4e:3a:dc:
f1:15:60:6a:f4:e7:b9:f0:8a:b1:6e:40:d6:08:f7:
0d:f2:e8:54:44:22:3c:63:59:f5:00:80:8b:b8:80:
b7:2c:bb:03:9b:03:6f:b4:b4:8e:11:3c:ee:de:36:
93:10:90:48:f2:12:a5:59:fc:dc:98:39:8c:af:29:
db:10:6c:a4:ff:a8:08:44:8e:f4:c7:c7:4b:1c:c7:
37:97:57:85:12:bb:96:e7:34:b0:28:74:68:a1:10:
3b:49:9a:18:51:89:a0:15:57:62:f8:60:69:29:7e:
41:88:00:aa:2f:3c:dc:52:4c:79:79:36:d5:33:d4:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:2B:E3:07:F3:49:1E:ED:EE:7C:B4:64:F3:43:2B:17:BF:97:8C
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:63:d2:1e:43:1d:3d:5f:4c:8a:26:64:eb:13:34:a2:ec:
fb:12:11:12:cd:5e:e6:e9:81:a4:03:2f:fd:73:84:df:f0:45:
ac:0e:85:46:5d:d5:d6:8e:9b:9f:3a:9a:79:6c:38:ee:ed:ac:
55:e0:c0:7b:a4:c2:83:02:09:e8:43:47:d6:de:52:4c:be:1d:
3c:52:26:71:a2:9b:04:7e:f4:5d:27:8a:03:cb:e3:9e:1e:af:
8b:f4:7b:74:f8:c6:59:e0:b2:06:a5:56:6f:09:23:6d:b9:34:
fb:e6:c7:4e:d8:48:08:04:59:82:5f:9c:d8:b3:ee:3d:99:a0:
d6:67:0d:8f:ef:52:50:7f:73:cb:80:62:49:b7:14:51:c4:d9:
12:5d:ad:34:1d:5a:08:f4:d8:a7:1f:74:66:23:dc:cc:55:bc:
ca:f1:13:db:24:73:f3:67:a5:1f:32:97:da:b0:07:ef:8e:da:
e0:05:d7:94:1e:ac:f1:6f:9b:e4:c5:be:a8:aa:fa:4a:44:76:
84:60:78:b8:df:d1:29:b1:1e:73:22:2a:a4:39:fd:21:a7:f2:
8f:de:70:96:9d:dc:ba:3a:da:32:6d:b5:2e:0b:4a:28:74:35:
d7:99:0d:db:f9:30:1b:bf:37:25:2f:3a:89:04:6c:38:54:40:
cf:b9:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:15:34 2025 by rpki-client