Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: EDz41vrlMpWqwQWrKqagnH5fFeHApq6Vyko3bfVCG6U=
Subject key identifier: 97:F7:4F:3D:2C:7A:73:5A:49:43:37:61:79:51:02:CE:63:9A:8E:44
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019938DECC959D1DCC4975EA2E4BEE902A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 13:02:29 +0000
Manifest this update: Thu 11 Sep 2025 13:02:29 +0000
Manifest next update: Fri 12 Sep 2025 13:02:29 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: 1LeL1jQ+raHL2Wt6GcOsgmUtcTVi8820tS9ABivoKQw=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:cc:95:9d:1d:cc:49:75:ea:2e:4b:ee:90:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Sep 11 13:02:29 2025 GMT
Not After : Sep 12 13:02:29 2025 GMT
Subject: CN=97f74f3d2c7a735a49433761795102ce639a8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:e3:26:7d:a9:ef:05:4e:b9:b4:c5:04:d4:
ef:0c:26:20:1d:64:ff:06:6c:eb:ca:2e:44:f5:12:
38:56:2d:a2:16:a7:66:4d:12:20:a7:39:e1:c6:58:
df:aa:d8:34:ee:b5:52:46:0b:90:57:a4:88:ba:0e:
2d:cf:21:7e:42:b9:56:15:09:42:f6:b2:d6:f4:e6:
3f:8b:39:3d:d6:d0:87:2b:c9:bb:fd:54:e8:7f:a9:
c3:8d:12:d7:eb:61:38:61:13:00:1e:8d:6b:dc:4e:
f1:3c:02:ca:25:43:a0:7e:0f:06:78:e3:e0:7e:cb:
7e:ff:15:20:01:d2:a8:31:31:23:cb:14:65:f4:8b:
f6:70:f4:d7:d9:2f:b2:35:5d:10:52:eb:13:17:a1:
45:4f:e0:68:ed:e6:80:6a:70:90:ba:e9:69:53:76:
a9:b3:b0:93:65:73:5c:be:16:8a:1c:08:2a:34:0d:
8d:a8:33:81:24:72:dd:52:fc:97:b7:53:32:2a:68:
84:e1:90:5e:8b:cc:1c:c3:ae:5b:ea:55:ae:77:e5:
a7:d4:ea:b0:b3:e1:23:00:6a:64:84:26:53:cf:63:
da:f9:76:1d:8f:bd:37:ec:75:3c:ee:77:14:63:06:
8d:5f:03:51:6d:0d:95:d4:d4:0e:c7:56:2c:76:d3:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:4F:3D:2C:7A:73:5A:49:43:37:61:79:51:02:CE:63:9A:8E:44
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:d6:7c:ce:90:9c:79:8e:03:6b:58:04:fe:2a:fa:93:61:
60:f6:fa:ce:46:9f:6e:a1:ab:94:c8:8a:62:c0:91:39:a6:45:
28:80:75:39:1f:af:f1:46:eb:d0:5e:5b:7c:6f:28:ce:2d:b1:
0f:c8:99:5a:f1:c0:67:80:9f:8f:01:ca:82:a2:81:44:59:e6:
5e:db:6e:8c:11:1b:2b:cc:cd:9b:0e:1e:6c:30:b4:ab:55:d8:
a5:fe:e6:31:d3:e5:1b:56:ce:a4:ff:c7:2d:f5:0d:7c:9d:e1:
f2:19:f7:2e:d8:4f:08:6a:91:9c:88:55:34:d6:ce:3a:1e:f8:
64:65:df:e8:70:a9:82:00:2f:9d:d2:77:e9:5f:31:e6:86:f1:
03:a2:2d:ce:72:cd:75:7b:23:27:38:45:cb:d4:d1:5f:d9:63:
82:b4:c0:75:46:c2:5d:fc:75:0d:f9:4b:a6:52:2f:b5:6a:54:
f7:f0:3f:1b:25:26:41:83:f4:fa:0f:9d:5a:ff:c1:3d:8a:a4:
24:4d:8b:a2:10:11:1f:e9:f9:28:d3:0e:3c:a7:2b:7d:af:f3:
9f:7b:95:17:dd:73:5d:e4:94:cd:1d:aa:9a:68:c4:78:6d:fc:
85:ea:45:08:ed:e4:5c:54:f1:a3:9a:25:3f:61:0f:b3:04:5d:
a2:fc:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 22:03:34 2025 by rpki-client