Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: jATxhAzVgGQ+/+S7oW/zO8RF+612aV/5Mr9Q+QiYsZk=
Subject key identifier: BD:F4:CE:C1:F6:4B:9D:6D:C5:38:88:5F:C3:FC:F3:FA:CD:77:A4:EB
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 01995342166867C3D04806B8D54FD21AB1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0F9F
Signing time: Tue 16 Sep 2025 16:01:03 +0000
Manifest this update: Tue 16 Sep 2025 16:01:03 +0000
Manifest next update: Wed 17 Sep 2025 16:01:03 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 1B4etsfrx8ZWQ4SCrN0M5+dkICfzOhTMEXwzZ/ajWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:42:16:68:67:c3:d0:48:06:b8:d5:4f:d2:1a:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Sep 16 16:01:03 2025 GMT
Not After : Sep 17 16:01:03 2025 GMT
Subject: CN=bdf4cec1f64b9d6dc538885fc3fcf3facd77a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:38:13:f0:05:70:f6:a2:6d:5a:0c:83:f7:
45:66:1d:8a:5a:cf:09:ee:9d:e8:96:6e:8d:25:6c:
5b:83:1d:7e:9f:60:e0:b3:58:7d:5f:5c:32:3c:8f:
0b:55:0a:b6:05:fb:61:6b:ff:b6:40:99:c1:15:52:
12:d9:a6:e3:9c:e7:c1:4d:31:c2:bd:7f:64:09:bc:
1b:de:94:87:ee:ec:4a:b8:cf:86:d7:1c:cc:04:e8:
99:ba:60:5c:47:09:6e:46:b3:a8:b5:c1:56:c6:ec:
8d:b5:e3:df:d9:9a:05:19:ee:5e:bc:e1:12:ed:93:
96:4c:22:9e:c1:8b:fb:6d:50:54:8c:55:1b:b2:6d:
5d:ec:94:65:4f:0c:93:5d:2f:ad:b4:3d:9a:cf:00:
d9:e9:03:af:10:65:21:44:c2:66:01:bc:7b:ef:2a:
b1:70:82:54:b5:a8:ff:88:aa:9d:fe:32:cb:4c:c1:
f3:e1:71:56:ac:77:01:03:c9:61:f5:17:21:dd:f7:
1a:6d:7e:1b:15:69:62:39:fc:1c:3f:0e:32:07:d3:
40:0e:65:ee:28:cf:1d:f2:e0:a9:7a:43:0b:b3:c6:
51:4b:4a:94:2d:6b:2e:76:a3:94:c3:9a:85:6b:bc:
76:fa:63:cc:8e:60:0f:ff:29:46:6c:92:a5:66:2e:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:CE:C1:F6:4B:9D:6D:C5:38:88:5F:C3:FC:F3:FA:CD:77:A4:EB
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3e:6d:66:2a:2d:09:8f:45:8d:67:9c:30:36:5a:82:3d:9b:
5c:aa:bc:39:ea:05:3b:74:20:64:99:6b:6f:5f:a3:8a:cb:cb:
bd:38:b8:43:0d:9b:0f:c9:9f:dd:27:b5:95:bb:43:2d:51:42:
31:bb:68:f8:d8:26:0a:4a:f0:a6:49:27:39:55:2b:63:d9:54:
4c:44:78:8d:e6:85:4d:44:83:2a:ab:7d:68:54:65:0f:7b:6e:
1b:57:6d:30:71:74:59:c0:ac:63:a8:ba:74:f2:d5:73:42:c4:
5c:c8:6e:50:7d:44:56:79:a0:08:23:dd:4f:c5:1b:48:55:06:
08:8e:e0:37:c2:9a:d2:e1:05:ff:f7:fd:eb:01:56:66:7c:1e:
e0:d7:dd:f5:d6:01:8b:dd:06:dd:50:49:22:92:c9:57:7a:c8:
d5:e7:14:3b:e9:85:ac:01:d5:76:94:5e:98:bc:f6:c1:4f:5b:
83:5e:53:a0:28:23:66:20:f0:3d:f3:01:c4:7b:44:9c:03:00:
4c:a2:c1:47:80:37:bc:56:a3:0e:42:29:7a:5b:4e:f8:40:d9:
26:93:a1:b0:38:91:dc:ef:2d:80:ba:c4:0c:44:89:b8:58:3b:
dd:02:44:69:b0:96:36:15:4a:67:0b:bf:63:e8:c0:14:e9:3c:
10:14:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:43:34 2025 by rpki-client