Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: tXe6tW66/4SYp2NirfPGuA+jig7ucAYDUhidAf3FdoA=
Subject key identifier: 15:F4:C4:F1:B7:5E:85:AF:9F:77:72:FA:08:B2:2B:50:8C:94:DF:0B
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019921E7F372753D7D205A34DC246A59F5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 153B
Signing time: Sun 07 Sep 2025 02:01:13 +0000
Manifest this update: Sun 07 Sep 2025 02:01:13 +0000
Manifest next update: Mon 08 Sep 2025 02:01:13 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: /41Q8LBIoZ3TenDsqQKGeNjeJhklqDArXlJNqZBnqE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f3:72:75:3d:7d:20:5a:34:dc:24:6a:59:f5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Sep 7 02:01:13 2025 GMT
Not After : Sep 8 02:01:13 2025 GMT
Subject: CN=15f4c4f1b75e85af9f7772fa08b22b508c94df0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:70:40:4e:b6:06:35:22:97:c8:07:f1:95:
c9:da:19:9e:c6:83:6d:41:5a:60:ee:c1:fa:23:3a:
62:a1:2c:e3:02:95:c4:7c:a4:48:61:c1:89:fe:f6:
8b:7f:15:df:f4:1d:b2:99:32:95:de:0d:31:4f:cd:
1e:b4:de:98:80:0a:71:82:a4:7c:02:8d:1d:ca:73:
bf:11:f8:2c:5e:ca:0e:61:20:d3:b9:1c:6d:a4:d8:
04:eb:1c:c3:6e:3e:62:33:7d:8c:c4:25:d5:bb:3e:
c6:24:5c:b2:08:16:4b:2b:58:ce:fc:99:4b:5b:dc:
4d:d3:64:03:8f:2e:46:fa:92:a2:5d:28:0a:0f:8a:
00:9d:62:1d:6a:cd:b3:1b:00:27:c1:fd:a3:a6:2d:
53:79:be:84:e3:fc:d3:01:eb:5c:ce:fb:cf:6a:b6:
b8:7a:05:13:a0:51:68:bc:29:50:90:6b:03:6b:93:
ef:13:93:22:43:2e:d9:83:e1:11:c3:ed:14:aa:5e:
60:eb:e1:cd:c7:3a:fa:27:16:3c:2b:48:37:49:15:
58:05:dd:d1:52:6f:6f:a8:43:cc:bb:4f:aa:0d:3c:
04:ec:a3:3b:c9:eb:15:a9:be:0a:67:43:1d:64:4a:
fa:44:33:b6:73:da:c1:61:94:e3:f6:15:aa:6d:7e:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:C4:F1:B7:5E:85:AF:9F:77:72:FA:08:B2:2B:50:8C:94:DF:0B
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:e1:77:84:11:ea:7c:3a:21:32:db:f1:a5:7a:48:28:cc:
9a:da:5f:ff:ff:71:70:3c:77:fd:aa:af:94:24:18:55:d6:b5:
39:54:8c:03:b5:c2:ac:72:15:06:9d:bf:aa:d5:78:a5:53:76:
57:25:54:81:85:15:96:39:45:eb:fb:e1:e8:36:02:d9:78:b9:
9e:52:dd:11:e8:a2:1d:73:80:86:92:31:ce:62:73:8c:46:74:
a1:f9:48:10:90:23:1f:24:43:a9:65:40:19:f8:ba:3a:15:4f:
bb:79:16:22:6f:8f:e0:a3:c7:ae:71:6c:b5:c1:9b:1e:e2:3c:
1e:23:19:ee:ce:8f:bd:c5:54:1d:04:47:26:29:19:e5:13:dd:
94:a2:76:06:49:fc:12:81:88:8e:46:69:97:82:dd:48:a8:6e:
9e:78:4d:88:58:a3:de:f7:de:63:eb:0a:91:09:91:d1:cc:82:
78:9d:ca:4b:53:87:25:46:12:9e:62:c1:d2:d6:12:75:e8:c5:
6f:7e:92:8c:df:d0:33:4d:60:e4:09:26:ba:f5:03:4d:2f:a4:
d5:4c:2e:64:73:e4:1c:c6:bb:31:1c:b2:14:f8:60:a2:b2:35:
01:5a:6b:59:07:59:87:40:8c:98:fd:d4:26:51:c8:d0:9a:d4:
17:d8:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:27 2025 by rpki-client