Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: usZcGoLBpsAxqZGcSuf+gmWmix83dfF37FJ69ykOeTM=
Subject key identifier: 21:A9:87:10:5B:BC:1C:4E:20:25:2B:65:AA:7F:D6:EA:66:5A:FD:84
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 0199228CA3D9115CF883CB409C189086F964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: 8xMxjtO-k2WYJj5fJmeVkGV5YA4.roa (hash: h2/dulkFhykUkX0igL56x6SI1vv2NsPZ43/9G+3BAxs=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: FhQ0cp17if8YhLOFZp89/D+uT3BKv67H5NGcVtHlsLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a3:d9:11:5c:f8:83:cb:40:9c:18:90:86:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=21a987105bbc1c4e20252b65aa7fd6ea665afd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:bd:42:45:d5:9e:6c:05:59:86:50:8a:96:
33:06:77:a8:8f:e6:6e:42:18:af:c0:32:0a:4e:f4:
5b:d6:f7:f3:0e:e6:a6:24:a2:83:cf:c6:50:65:63:
d6:cc:2b:3a:98:1b:e8:05:d4:31:be:69:3d:67:05:
5b:80:ac:52:36:47:0a:ee:2b:e9:f7:1a:86:17:b2:
d1:a9:8c:db:58:fe:31:68:d8:c4:47:6d:d9:13:95:
9c:7f:1e:25:f9:c3:88:bd:71:c1:26:4a:0f:89:a8:
81:de:bd:dc:8d:51:0f:4d:bd:cb:6f:e0:67:cd:0f:
0f:48:11:f7:62:1b:0a:96:e2:4b:89:99:07:5b:95:
db:94:8e:3a:0b:5e:ce:3b:1d:06:d5:55:a3:5f:8f:
c8:07:2c:43:7b:1c:d4:0c:2a:af:c1:87:82:63:d9:
e7:08:19:2e:c8:fa:6a:75:1e:ba:ea:7f:a9:68:ff:
3e:0a:d8:67:c3:1e:bc:db:2c:9c:00:84:2b:4e:69:
d4:82:fd:3d:88:7c:d5:ef:e0:69:62:a3:0f:a9:36:
4b:e9:0f:a5:c9:e0:53:6d:a8:82:6a:ea:b5:97:97:
73:89:84:d3:d1:5d:3f:b8:74:b8:d1:30:4c:c5:b5:
51:78:e4:2c:c7:85:6b:a2:c8:f3:d9:5b:be:39:29:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:87:10:5B:BC:1C:4E:20:25:2B:65:AA:7F:D6:EA:66:5A:FD:84
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:11:6a:70:f9:28:6d:9e:79:7b:75:23:87:61:b6:50:90:
18:e1:f3:00:09:5b:96:7d:b6:d2:d0:77:cc:8d:52:d9:18:14:
b2:66:6e:e7:3d:72:e5:3f:02:15:95:41:44:c5:88:61:f6:b7:
2f:d2:9a:ac:d7:a2:57:6d:a8:45:ed:b6:cb:82:b4:4b:e4:ef:
aa:f9:14:88:c6:ae:96:45:a5:da:ce:9e:b1:8b:00:8b:5f:ca:
dd:3d:0e:20:d7:a3:df:53:31:04:7e:c7:45:ea:48:48:8e:3c:
c5:fd:9f:b1:7d:ff:fc:35:f2:33:64:3d:d6:20:9b:ce:fd:ad:
2d:da:16:5b:4b:82:d2:c2:d0:3a:21:0a:51:54:2c:20:4c:6b:
fb:af:9e:dc:0f:83:b2:ff:6d:54:16:db:9b:5b:43:1a:77:ee:
bc:e3:aa:02:7b:a6:3f:f7:2d:ae:7a:eb:ac:bb:fc:16:5e:60:
2d:93:7d:3a:5d:e7:a9:73:7c:7d:84:16:54:86:35:7e:ed:3f:
6a:c4:d5:c6:b3:be:12:ed:f4:02:2c:b1:a7:2e:08:48:ba:b9:
75:01:df:9e:a6:fb:82:28:3a:de:97:bc:2e:27:0d:91:53:e8:
69:2d:ba:2b:29:04:44:df:13:ec:6f:8f:da:d5:d3:7e:d5:3c:
74:63:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:37 2025 by rpki-client