Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: XOQSXPNFWuLMUfZ18yYrWUeGhq22Di3A7lNKXzQ919Y=
Subject key identifier: EF:42:22:D3:D9:67:ED:84:B3:82:88:CA:45:C3:76:F6:D1:98:1E:71
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019926D794B30A597445ECA5341DEE32A95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 1684
Signing time: Mon 08 Sep 2025 01:01:26 +0000
Manifest this update: Mon 08 Sep 2025 01:01:26 +0000
Manifest next update: Tue 09 Sep 2025 01:01:26 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: 7sgM8jQey0hzU8RbkK0fpr8zuWE.roa (hash: gY/oXRN1rQWRXTj4ibW7nW6LN4SdHlM7BLUYysL1ewo=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: PRuKX3gpMIqsfVtYTl8t3oQiiwKj0eXM8raPQIeHRTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:94:b3:0a:59:74:45:ec:a5:34:1d:ee:32:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 8 01:01:26 2025 GMT
Not After : Sep 9 01:01:26 2025 GMT
Subject: CN=ef4222d3d967ed84b38288ca45c376f6d1981e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:c6:84:a1:cf:45:79:a1:3f:c1:6f:a2:ac:
07:dd:82:58:ae:38:4a:05:26:b0:91:ac:06:d6:46:
b2:37:f3:9b:6f:6b:88:96:f5:01:f8:de:55:1b:27:
fa:aa:3d:59:57:58:ee:54:36:aa:ec:3b:24:c2:2f:
cc:36:29:a1:49:1e:70:32:b8:11:c6:a2:96:1c:36:
3a:47:e7:a6:23:cb:df:5c:e2:36:dd:e6:b6:5c:eb:
8f:19:a8:8e:3c:cf:0c:42:2a:e3:26:21:8e:02:96:
48:30:86:93:cb:d6:a9:95:65:47:64:33:6b:2b:f0:
03:18:46:5c:8f:9a:bf:a2:d1:4b:f1:2d:a7:62:f3:
d8:96:e4:a9:e6:71:8c:eb:42:ab:f1:60:cb:2c:93:
07:9e:2e:ab:bf:a6:19:e8:42:9d:d9:be:d7:cd:c6:
f8:a1:2e:da:ec:fc:dc:f5:97:0c:da:ba:70:0a:ad:
2d:f0:6c:d0:a7:da:22:87:7e:08:53:13:8b:9c:de:
39:c2:fe:4c:e0:18:ad:98:8f:94:d9:70:34:62:97:
98:c0:a7:b3:73:ec:cc:0a:34:e5:4f:93:d0:07:7c:
3c:9f:84:7f:2c:87:2e:bc:d6:63:af:46:01:98:76:
e1:a6:35:ee:a3:82:6d:0f:90:7c:fa:2d:67:cf:48:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:22:D3:D9:67:ED:84:B3:82:88:CA:45:C3:76:F6:D1:98:1E:71
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:99:af:65:7b:7b:9c:81:1b:76:d9:85:ed:e4:d0:fc:bb:de:
95:89:c4:cf:38:80:97:6f:55:d8:dd:75:ac:77:59:c8:22:fa:
b6:78:93:63:69:7d:33:9d:32:dd:07:ef:fb:d3:a2:9a:2f:a1:
bf:8a:05:72:43:02:9d:fe:15:f4:00:ab:41:ad:ec:b8:94:ef:
5b:3c:2e:8e:69:30:78:e4:2d:76:80:85:c0:19:ad:dd:5b:bd:
d0:a0:2c:b1:f6:67:52:a5:56:ed:ab:cd:6c:15:0c:48:5d:c6:
cd:cd:fe:d7:7c:01:d2:54:7b:34:5d:6b:86:34:ce:65:6e:11:
44:74:69:d4:00:76:0e:ae:15:fa:52:d6:96:92:63:56:56:55:
53:a6:9d:86:0b:52:d9:35:49:f5:57:2a:da:ac:6c:5c:8e:7d:
05:2a:01:81:b8:ab:b0:52:40:37:50:53:49:e7:05:f6:ff:bd:
2f:b4:09:84:a4:eb:5d:eb:59:b3:aa:a1:c2:5f:9e:15:ef:2f:
6a:e3:e4:88:ef:0f:63:b7:aa:85:7b:ba:0b:b2:e2:ca:ed:08:
68:3b:14:c3:43:d3:85:fd:1f:0b:c2:fb:3a:8e:3c:52:b3:aa:
9e:30:0b:a1:a4:5a:21:b1:f2:9f:01:65:5c:44:85:0e:78:3e:
0a:99:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:25 2025 by rpki-client