Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: hBOQ/ljUFwNNwgO//MDh6eW4rHxgEgxdiIlogLtMD4w=
Subject key identifier: 4B:79:38:05:70:B1:7A:CC:47:EA:6B:3A:98:57:E2:75:A4:D7:07:FB
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01995154D51DBC5A44CC1AB1DB02B2205003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 165C
Signing time: Tue 16 Sep 2025 07:02:17 +0000
Manifest this update: Tue 16 Sep 2025 07:02:17 +0000
Manifest next update: Wed 17 Sep 2025 07:02:17 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: zi8PffCIKMQUnoY8ulg9gyPczZO5YIvUKZ3VzACnilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:54:d5:1d:bc:5a:44:cc:1a:b1:db:02:b2:20:50:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Sep 16 07:02:17 2025 GMT
Not After : Sep 17 07:02:17 2025 GMT
Subject: CN=4b79380570b17acc47ea6b3a9857e275a4d707fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:71:8e:ee:a1:99:00:63:2f:c7:30:8e:91:
1d:08:cb:2f:7a:4d:76:ea:98:d8:7a:bb:35:7f:96:
7b:15:e2:31:b9:fa:7a:54:c1:b5:6b:e2:c0:11:a0:
c5:72:d0:2b:a0:31:3f:52:3c:90:ac:26:1d:e8:ea:
0d:fa:cf:b0:77:38:e4:d1:00:07:5f:95:6c:c6:a1:
15:22:ea:ac:c4:fd:74:ad:b8:7d:18:df:d4:0b:61:
48:82:3a:85:af:b8:69:62:38:f2:eb:6e:94:cd:30:
b0:4f:b4:96:30:07:7e:83:92:66:07:a1:2b:99:a9:
8b:d2:f6:52:d4:73:0c:14:c2:89:ae:f8:8b:2c:29:
7d:d4:d2:70:56:df:99:82:30:97:49:e1:6f:44:08:
d6:f6:b0:da:99:6c:92:df:8c:ca:4a:e9:cf:58:73:
d4:93:8b:80:09:13:86:af:7b:5b:71:76:6c:79:df:
be:24:65:25:46:0c:8d:96:c5:a7:ed:40:b4:98:a8:
35:41:f1:81:21:cd:64:74:b3:18:5a:74:0f:f7:5a:
f9:38:1c:79:96:9d:b3:cd:e7:91:7a:7b:7a:96:e5:
7c:94:fb:51:36:38:98:c9:4c:5a:1a:d4:af:da:fb:
8c:87:06:1b:3c:ee:d5:29:c2:17:66:a8:99:bc:5d:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:38:05:70:B1:7A:CC:47:EA:6B:3A:98:57:E2:75:A4:D7:07:FB
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:12:d3:3e:dc:4e:32:88:87:44:12:6c:66:72:e4:22:68:
3a:ef:29:a7:18:2b:ff:04:3a:6b:ce:8b:87:ff:e4:5f:df:fe:
c4:27:1f:30:f1:4f:c8:e1:85:93:e5:ed:99:e2:ca:19:03:e9:
c6:a6:83:43:d3:da:ef:ca:02:0d:c6:d0:35:b0:ec:93:bc:a7:
c7:3c:c6:8d:46:52:ae:0c:0f:d5:ab:5a:4a:9e:96:43:35:d1:
28:46:d7:8c:eb:d2:3d:74:cd:de:4d:a3:25:35:80:42:e3:87:
c2:38:30:f6:35:93:30:43:58:0e:aa:16:fb:7e:df:ce:85:e9:
d5:e7:0b:66:70:c9:aa:97:5d:30:04:41:e4:58:89:49:6f:87:
7a:69:e3:80:5b:79:49:05:e9:08:ad:87:7b:ad:e5:3b:b2:ec:
62:0e:3b:dd:6f:38:25:e6:78:6d:4a:6e:8e:82:98:ac:d4:2c:
0e:2f:65:ef:41:06:8f:41:b5:97:50:c4:dc:e7:4d:52:aa:ab:
25:17:91:43:a3:be:37:de:3b:f3:64:dd:62:6d:12:3a:98:30:
d2:a6:de:82:d3:4f:ea:8c:ae:d0:6d:e4:bb:bc:b6:72:bd:ea:
a5:e0:84:90:4b:20:a1:93:d5:4c:56:c9:85:23:5e:8a:88:fb:
6d:19:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:03:37 2025 by rpki-client