Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: 19iaAundmyrLMXAlh7fZT3Gm/AcHzdbl8xCtSZsVqfg=
Subject key identifier: 75:89:FB:B1:81:32:6F:4D:54:DF:ED:BB:DB:1E:13:E9:27:38:BA:7C
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 01992443D287FA3276CA6F5798FEAFC51BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 01A6
Signing time: Sun 07 Sep 2025 13:00:48 +0000
Manifest this update: Sun 07 Sep 2025 13:00:48 +0000
Manifest next update: Mon 08 Sep 2025 13:00:48 +0000
Files and hashes: 1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: FJUmKsDlZISdlIopGH2JEziKeH3fBKWTak5Cw/QdVAo=)
2: wHN-DwZ2phagN24dcEs0dOWS0n4.roa (hash: PRZ4ezYR0MkLhJDk66PX2K5V2aQktdQihK+Xr7QGigU=)
3: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:d2:87:fa:32:76:ca:6f:57:98:fe:af:c5:1b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Sep 7 13:00:48 2025 GMT
Not After : Sep 8 13:00:48 2025 GMT
Subject: CN=7589fbb181326f4d54dfedbbdb1e13e92738ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:ad:c8:79:d3:17:b1:18:59:f2:ec:ce:8a:
23:fa:20:3c:12:9c:d2:29:ff:3b:dc:77:4a:39:05:
41:8d:62:ca:61:19:76:33:0b:b5:e2:0b:22:1a:44:
21:97:70:62:e6:db:2b:3f:a1:9c:7f:f7:05:1d:9e:
e4:de:dc:d4:25:0a:d2:c1:db:c8:44:e0:d3:1a:19:
31:5f:9a:09:52:a7:3f:84:c5:81:ab:7a:54:9f:a5:
09:cb:6c:90:12:1f:8b:5f:4c:30:43:e1:6f:02:02:
bd:41:4f:e8:ad:9d:0b:44:1c:70:01:9f:8f:32:0f:
8a:27:22:b7:f9:d4:32:6f:33:ed:ce:ff:fa:41:91:
3c:6c:60:6f:77:9d:18:22:e8:5b:d7:6a:76:dd:66:
f7:b3:16:3b:bf:75:f2:e2:12:70:63:69:20:86:33:
3c:f8:0a:c1:97:ef:33:53:a5:7c:37:e1:7f:73:24:
01:06:ae:99:09:16:d7:82:26:f8:7a:24:2b:48:4a:
d4:ff:68:0d:67:d4:c6:a0:81:41:23:d6:2d:6a:e3:
bc:86:f5:d6:4a:64:82:86:56:dd:8a:2f:1f:e7:c9:
3c:b8:ee:8d:a9:5e:ec:8f:44:1f:1a:e8:83:9f:01:
7b:89:8f:0d:af:98:5e:39:71:20:64:a3:77:20:ae:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:FB:B1:81:32:6F:4D:54:DF:ED:BB:DB:1E:13:E9:27:38:BA:7C
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:fa:63:f8:b4:85:ec:6a:fd:ee:1a:79:a4:2b:03:6d:db:
7c:e7:fa:66:dd:e4:d6:e0:24:1b:24:48:0a:e9:0b:e6:76:30:
23:ea:f3:0e:21:be:e7:84:a2:6b:db:80:ed:15:65:1a:89:a3:
d8:d2:4f:a0:ad:35:d3:bd:1e:ff:1c:64:6d:75:5f:72:63:2d:
a5:aa:96:a6:0b:2e:fd:93:1c:00:07:20:e5:4d:89:47:01:da:
c8:86:15:9e:c7:af:fc:86:a0:30:bf:8d:13:d9:a6:61:d0:34:
0a:9c:e6:38:a9:d1:5f:40:78:80:57:16:5e:16:16:52:22:25:
8b:ff:df:63:f6:1d:69:cd:eb:3a:91:40:11:0c:86:0a:0b:d4:
a5:c1:bb:ca:40:f2:5a:08:9e:ef:f9:ab:9f:e1:dc:f9:6b:dc:
da:e1:ee:77:61:53:ca:c8:58:b8:9c:7a:ff:9f:89:2b:53:64:
1d:69:da:0c:6a:06:08:41:64:c5:f0:0a:9a:83:59:5e:c6:7b:
7e:0f:a6:5e:75:2f:c4:ec:1a:d2:be:c0:95:c5:cc:39:44:84:
f4:3e:8e:b1:a1:f8:67:b4:e0:d3:4e:13:1e:61:de:5c:7e:86:
e9:74:2e:08:66:08:be:74:e3:65:1e:2b:69:7d:2d:4d:7b:08:
7f:78:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:45:06 2025 by rpki-client