Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: m++fY5xmddYFzpRtkiX+v+Oq1FS8DJyB6YNf0WOSoFA=
Subject key identifier: B7:05:37:1D:88:C2:12:4A:65:CF:9E:38:8F:21:9A:3E:05:90:0C:3A
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01984A40C71039DB31ECC09F2D66271AC5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 07C9
Signing time: Sun 27 Jul 2025 05:00:15 +0000
Manifest this update: Sun 27 Jul 2025 05:00:15 +0000
Manifest next update: Mon 28 Jul 2025 05:00:15 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: GoZd1oSRr2e8/RY5MixUA6FbEb0h32Smg85/Valvhmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c7:10:39:db:31:ec:c0:9f:2d:66:27:1a:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jul 27 05:00:15 2025 GMT
Not After : Jul 28 05:00:15 2025 GMT
Subject: CN=b705371d88c2124a65cf9e388f219a3e05900c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:b5:55:64:71:b6:d2:dd:78:e5:9c:60:73:
04:94:5d:7e:0a:40:48:22:13:4f:e6:68:55:34:d3:
71:5b:07:dc:43:aa:43:61:60:30:e5:ea:1b:91:d1:
83:86:7e:a0:0d:52:20:81:be:45:4e:b2:27:a8:0c:
2c:66:37:f3:82:21:95:39:88:9a:fd:a4:0b:87:c7:
3c:75:95:69:ca:80:b4:ee:ce:bf:08:e5:a9:0a:fe:
64:ac:c1:39:3f:d5:ae:5f:58:4b:6a:26:3b:92:6e:
52:61:01:7f:fc:27:9e:42:f2:dc:b2:68:23:7c:57:
14:5b:56:45:c9:d3:75:27:6e:88:39:55:1c:39:87:
76:e6:86:f6:be:11:6e:2a:46:05:8a:24:0c:c7:e9:
6c:8d:4c:8c:9e:a4:e8:a6:f8:19:2c:38:df:89:87:
06:b6:17:39:1c:04:b6:7a:9b:73:c6:44:da:4e:16:
c2:2e:a6:43:f9:56:af:01:ac:76:56:8b:7b:4a:2d:
aa:00:20:38:38:31:72:49:0d:ec:8b:73:be:56:10:
48:a3:e7:11:9f:cf:cd:db:77:c6:35:7f:0c:a0:08:
74:2f:4a:fc:ae:5f:e1:bf:cb:2b:85:44:44:5a:18:
b6:fa:d4:75:59:f8:e2:bd:a1:5d:17:98:08:8e:eb:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:37:1D:88:C2:12:4A:65:CF:9E:38:8F:21:9A:3E:05:90:0C:3A
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:e2:17:b9:fd:23:5f:9d:40:56:26:c9:2c:03:c7:b9:6c:
1b:e5:50:db:b0:41:43:e2:0d:fb:1b:e8:0c:88:32:e0:d6:d8:
f6:5f:38:8e:48:e2:7a:1c:56:71:0c:bc:9d:9f:6d:ca:b8:f7:
bd:a2:ca:82:7f:98:1b:05:95:36:fd:b9:b7:34:2f:d2:6e:66:
0b:84:e4:88:f3:50:5e:26:f6:75:92:94:65:c2:05:41:d3:1a:
97:52:05:8a:73:67:13:61:db:d3:dd:13:e9:13:dd:2f:db:0c:
b7:86:5f:25:ad:91:12:4a:5a:55:bc:06:2c:c7:c6:5f:1d:43:
a3:09:33:1c:a6:f4:cf:bc:a2:fb:e1:49:1e:90:eb:30:dd:db:
13:67:4d:72:17:c4:62:77:5b:a1:60:10:7d:9a:b0:d1:37:c8:
47:cb:2d:3c:12:78:24:8e:80:e6:a4:4a:c3:07:7c:0a:9e:6c:
a3:42:6c:4a:b4:fe:00:88:22:34:5d:89:c8:ae:9a:7c:28:26:
3f:bb:ca:6e:1d:cd:81:d7:a3:ca:86:8d:a2:25:d2:2c:2b:ee:
86:80:6a:63:68:ed:8d:c2:20:ec:ff:a2:28:df:61:f9:99:47:
56:b6:a5:6f:66:72:f5:84:e5:f2:d5:dc:a1:87:a6:b0:98:13:
3a:f3:6b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQMcQOdsx7MCfLWYnGsXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw
MDI4NjMwHhcNMjUwNzI3MDUwMDE1WhcNMjUwNzI4MDUwMDE1WjAzMTEwLwYDVQQD
EyhiNzA1MzcxZDg4YzIxMjRhNjVjZjllMzg4ZjIxOWEzZTA1OTAwYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl+1VWRxttLdeOWcYHMElF1+CkBI
IhNP5mhVNNNxWwfcQ6pDYWAw5eobkdGDhn6gDVIggb5FTrInqAwsZjfzgiGVOYia
/aQLh8c8dZVpyoC07s6/COWpCv5krME5P9WuX1hLaiY7km5SYQF//CeeQvLcsmgj
fFcUW1ZFydN1J26IOVUcOYd25ob2vhFuKkYFiiQMx+lsjUyMnqTopvgZLDjfiYcG
thc5HAS2eptzxkTaThbCLqZD+VavAax2Vot7Si2qACA4ODFySQ3si3O+VhBIo+cR
n8/N23fGNX8MoAh0L0r8rl/hv8srhUREWhi2+tR1WfjivaFdF5gIjuv00wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcFNx2IwhJKZc+eOI8hmj4FkAw6MB8GA1UdIwQY
MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct
MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4
LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhriF7n9
I1+dQFYmySwDx7lsG+VQ27BBQ+IN+xvoDIgy4NbY9l84jkjiehxWcQy8nZ9tyrj3
vaLKgn+YGwWVNv25tzQv0m5mC4TkiPNQXib2dZKUZcIFQdMal1IFinNnE2Hb090T
6RPdL9sMt4ZfJa2REkpaVbwGLMfGXx1DowkzHKb0z7yi++FJHpDrMN3bE2dNchfE
YndboWAQfZqw0TfIR8stPBJ4JI6A5qRKwwd8Cp5so0JsSrT+AIgiNF2JyK6afCgm
P7vKbh3NgdejyoaNoiXSLCvuhoBqY2jtjcIg7P+iKN9h+ZlHVralb2Zy9YTl8tXc
oYemsJgTOvNrUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:52 2025 by rpki-client