Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: dpQdRJxXexWJx/LvfAMBAE/1eGWUZxpQpd4cCdMQ4vE=
Subject key identifier: 9F:0E:CA:0B:D3:CF:F3:29:F7:F4:51:0B:CB:6F:57:6F:86:BC:AD:D3
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 0199221E613C537B01BCE9DBBEDA138DAB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 04C7
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: 8f1lpFRKg6PSnPX3bO9ucFCbbWi6qnAHUzt/PfbeloI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:61:3c:53:7b:01:bc:e9:db:be:da:13:8d:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=9f0eca0bd3cff329f7f4510bcb6f576f86bcadd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:e5:b8:9a:fd:09:46:85:fb:0e:71:38:3f:
27:c2:3e:de:96:d6:96:8a:c5:a5:62:f2:01:31:5a:
80:8c:45:03:e8:ac:9d:5d:4b:7b:ac:4f:0e:8e:0d:
c8:f3:0e:fd:30:a1:53:46:08:f8:49:30:18:09:bd:
81:2d:66:eb:02:d5:84:4e:a5:dd:a0:0c:d0:41:d4:
74:4f:85:ef:3e:12:88:9f:a5:64:b4:38:99:72:99:
47:74:b3:eb:b6:b6:15:7a:56:9c:d7:38:f4:e8:13:
0c:d8:b5:1e:01:54:fa:77:d5:48:64:a5:39:f0:3f:
12:68:e9:8e:32:29:4b:60:2e:71:ee:1e:72:ac:36:
f4:f4:b5:b8:26:c2:c1:e5:b5:13:fb:cf:34:55:f5:
bc:06:1b:3d:08:2b:ff:10:f0:c6:12:7e:ac:9a:13:
ac:cb:f2:08:36:cb:7c:ad:fa:fc:1b:69:a5:52:3e:
5b:52:62:3f:31:c7:ea:e2:ef:8f:e1:2b:cc:d4:d6:
83:75:0d:1c:93:d0:c2:7f:a3:0f:4b:11:d0:43:e2:
e7:55:ce:a0:e0:0e:a2:d7:18:1a:47:50:39:59:88:
0b:03:6a:8e:5e:59:60:d9:e4:b1:52:90:a5:71:cd:
44:52:ac:77:47:5a:61:dc:32:f6:1b:91:48:b9:68:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:CA:0B:D3:CF:F3:29:F7:F4:51:0B:CB:6F:57:6F:86:BC:AD:D3
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9f:2d:ea:f9:d7:46:06:f8:99:93:27:2c:0a:7c:32:62:5e:
58:a9:6b:87:55:ac:3a:78:f7:dd:00:2e:25:c1:ce:57:b8:fd:
f9:c1:cf:6a:fd:f4:c2:c3:74:8f:5e:7a:71:f3:79:28:53:40:
c1:ea:03:aa:8c:2f:7a:24:c6:28:7e:f0:9e:e4:1f:a6:f4:a2:
8f:58:c5:5e:fb:80:7c:f9:b1:34:74:ea:10:10:1f:a4:66:24:
17:5f:0c:f7:e7:0a:cc:f7:0f:fd:02:e0:51:1c:4f:ca:e3:72:
f3:75:71:f1:7c:f7:45:a4:ae:69:8a:00:38:71:3b:fd:c1:96:
46:28:4a:0f:76:67:71:58:51:44:dc:75:c6:7d:1b:ab:8c:9c:
0a:78:c2:dc:1b:94:35:50:a2:7b:c1:8a:5d:4b:76:d3:c0:8a:
d4:78:3e:ff:ea:8e:5f:28:d0:9b:dd:a5:e1:55:b2:14:f4:46:
73:08:9a:a6:70:0b:08:c1:8d:0d:87:35:f8:f7:df:78:7f:3e:
0f:a7:19:9f:6c:ee:f1:40:d0:1a:b7:52:2d:c1:b1:c6:32:1a:
4b:bc:b9:a1:3c:e4:0c:49:1b:98:b5:d2:8d:85:ac:9c:46:5c:
ed:00:e5:83:8f:a8:aa:d4:1b:d6:31:a5:b1:96:2a:b2:f6:46:
3b:d1:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client