Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: XS2Fq+ohieP8J0u0dWwy5DOn3qRa5zpr7iF5VVtSZ10=
Subject key identifier: 2D:E6:12:1F:CE:21:1A:C2:31:76:B3:B2:A4:DA:20:EB:40:44:E4:11
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0199326D0FEB09DD759971AB0B295195333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 07:00:32 +0000
Manifest this update: Wed 10 Sep 2025 07:00:32 +0000
Manifest next update: Thu 11 Sep 2025 07:00:32 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: JQmBbmt/rPlxU2WtThUpGRNobbss9EOlLvapjnncdvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:0f:eb:09:dd:75:99:71:ab:0b:29:51:95:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Sep 10 07:00:32 2025 GMT
Not After : Sep 11 07:00:32 2025 GMT
Subject: CN=2de6121fce211ac23176b3b2a4da20eb4044e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:00:69:c0:a5:07:69:d7:a5:d1:50:70:c2:
dd:21:9c:e8:56:d3:9e:42:09:a3:71:76:06:82:01:
90:fb:c2:fa:1c:50:62:0c:7a:93:58:5a:2a:e5:ca:
41:fe:7e:f7:dd:e5:9d:f0:ba:9c:83:97:f0:b3:d6:
36:36:b8:e8:38:62:00:70:ce:75:21:cc:56:e6:ec:
b5:42:a8:d4:6e:e5:bb:2f:ab:9b:fd:98:1a:a8:d7:
ef:4a:cc:b8:0f:7e:68:eb:a0:5c:9e:56:19:2f:4c:
37:ac:89:de:63:02:19:60:85:ff:44:97:8d:14:6a:
13:e3:f3:4c:1e:58:cd:3b:5c:26:f0:14:24:67:0b:
ad:49:9d:df:c6:e8:9c:2b:bc:79:98:48:c1:66:52:
bd:ac:52:2d:36:6e:f1:59:82:e9:c7:a2:ec:29:c7:
74:5b:f5:17:71:af:d9:25:3c:b7:f9:e0:bd:78:c8:
40:e3:d4:11:f7:6d:91:33:dc:c9:f5:99:9a:85:12:
43:1f:61:35:6b:4b:42:a9:96:89:56:7b:24:73:4a:
df:49:a2:aa:fb:1c:cf:47:63:c6:33:c9:d6:14:41:
70:e2:3e:8f:8e:3a:9d:65:af:af:64:03:3a:91:75:
6b:48:04:a6:c5:59:36:f8:13:c3:52:09:98:5a:55:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:12:1F:CE:21:1A:C2:31:76:B3:B2:A4:DA:20:EB:40:44:E4:11
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:3d:e7:06:6a:27:12:5f:64:5a:c3:d9:42:54:8b:ea:65:
5a:65:d3:64:95:76:0c:6e:e8:b3:ee:48:40:2b:9c:cd:6a:64:
6c:87:b4:dd:3a:4a:b4:f9:d7:b8:62:a0:3f:d5:4a:b9:51:76:
ad:9f:53:06:b8:8e:f4:0d:4a:c9:bb:29:09:6f:9b:d5:96:d6:
44:9c:d6:b2:48:93:00:54:2e:bd:0c:6c:5b:b4:ba:19:80:98:
00:45:05:e1:20:b0:99:a3:a3:9d:32:11:56:2f:76:a4:d2:76:
3d:f3:86:9c:3d:e9:4e:60:2a:ef:2f:db:63:0e:9d:eb:1a:c7:
80:cf:1d:e1:49:3b:c9:41:69:ec:1a:c1:1a:50:4c:c1:c3:24:
91:6e:3a:38:61:e0:0d:6f:e9:6f:f3:61:db:1f:60:ef:16:3c:
86:4f:8c:c6:bc:6f:ef:67:d2:b0:af:a5:fe:12:12:f1:11:0d:
56:2b:09:69:18:36:1b:56:29:bb:1a:b2:3f:da:4e:62:b3:26:
cc:2c:e3:71:2a:33:0b:2a:79:cc:11:37:8c:f4:2d:b4:e0:03:
d6:56:0d:63:80:c0:0a:b7:03:62:0c:80:f2:f2:b5:58:c0:bc:
56:6a:2c:71:fe:3a:01:7f:07:b3:dc:95:e9:22:93:3e:d1:05:
0d:26:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:14:05 2025 by rpki-client