Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: T9pMQ6qYaxHdywopaj17kTKPCBmpJbkDcbNwaG+QJeU=
Subject key identifier: 59:31:71:48:0B:7E:43:A6:B4:75:15:DD:B2:19:63:79:E8:C8:84:DB
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01993981BD2D0CEFCDDDAD29FCAC1057D6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 16:00:27 +0000
Manifest this update: Thu 11 Sep 2025 16:00:27 +0000
Manifest next update: Fri 12 Sep 2025 16:00:27 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: p+vmZC1hmWxSXCO+5tsg0WIH7spH6ArS0g+NrbgXSuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:bd:2d:0c:ef:cd:dd:ad:29:fc:ac:10:57:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Sep 11 16:00:27 2025 GMT
Not After : Sep 12 16:00:27 2025 GMT
Subject: CN=593171480b7e43a6b47515ddb2196379e8c884db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:04:d5:6f:89:f8:ad:5e:ec:f4:06:47:f8:
da:36:0c:61:43:cb:6d:2a:dc:25:48:ae:63:bf:d3:
f7:a9:99:b0:2d:44:03:02:fd:6e:b0:00:be:79:55:
0f:6a:b9:f1:52:ab:a4:29:cb:5a:fb:5f:0a:dd:71:
8a:56:f2:4d:7e:5d:8b:6a:25:1c:7d:b6:3f:26:85:
50:d6:9b:b0:88:6e:af:27:a5:38:10:12:0d:65:dc:
ab:4e:e7:b0:03:85:db:a1:24:a2:30:88:88:21:77:
35:5e:ed:8c:ed:74:0f:e2:c6:07:00:49:b9:c5:50:
74:ad:98:8a:17:b3:d2:e0:46:bb:cd:ab:e1:4b:3d:
30:20:a4:ec:87:a7:02:0b:d6:29:6e:3e:04:34:4b:
2e:80:00:84:b4:bc:b0:b5:00:f0:38:f9:0d:c4:ff:
8b:d9:ee:c4:0e:d7:ee:07:72:10:6d:dd:78:a0:37:
21:f0:cf:fe:b4:9d:e9:4f:ed:9c:46:ad:3c:98:2d:
f6:a4:a9:e3:e3:82:50:97:e9:ce:67:dc:c0:be:e0:
c8:e7:ce:3a:82:df:7f:85:7e:a2:ac:04:8f:b3:f2:
f8:61:d8:fd:60:d1:fa:20:06:7b:b8:2e:53:2f:65:
8b:c0:94:77:7e:64:16:0b:02:a7:2c:84:52:99:8a:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:71:48:0B:7E:43:A6:B4:75:15:DD:B2:19:63:79:E8:C8:84:DB
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:26:9b:51:f3:3d:cd:af:d2:e5:d6:66:70:56:bf:2e:51:1d:
fa:eb:5c:88:1d:2d:7b:c4:1f:88:a0:a7:d7:9a:73:bf:92:cc:
0a:c2:e1:24:94:e1:60:e9:c3:86:bf:97:33:bd:21:a8:04:0e:
bb:9b:5f:85:49:83:32:ad:96:e5:8f:23:3d:80:be:43:a3:b9:
ec:38:c9:0c:08:2c:b6:a1:0c:37:13:15:16:99:e2:30:32:50:
e4:55:d0:cf:8c:ec:d8:6b:9c:e1:9e:a2:eb:54:43:a9:fc:40:
c5:1c:4f:83:1d:90:da:a4:5d:23:fd:62:aa:d4:0a:9c:60:23:
35:55:cf:38:0d:3c:53:c1:3c:66:2d:97:e2:9c:7e:cf:61:c0:
85:96:45:89:6a:41:39:de:a9:12:97:3a:c2:fc:83:52:41:08:
b6:be:44:14:84:df:87:c6:59:8b:05:5f:fe:9e:ad:e6:7d:95:
1a:c8:16:6b:27:80:bf:c9:c9:54:50:b5:ca:45:ac:11:3e:d6:
3f:ce:b7:13:f4:ba:a6:b6:85:0d:0c:6c:f0:b3:a1:38:ae:ad:
68:88:e3:ca:85:9d:39:4b:c2:fc:3b:5b:00:eb:36:65:81:a4:
5d:09:75:37:de:9d:61:f6:4a:47:94:2b:e4:49:0a:82:5f:75:
84:b7:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:56:38 2025 by rpki-client