Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: 21PCTeT0PK3TDCujoQGFh7PytLrf71VqpYeXe08TbwI=
Subject key identifier: 71:F3:A1:EA:FF:E8:24:68:2A:34:77:35:25:A6:24:18:C4:9D:FD:80
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019923A0320A8A3311C8BE3F7C35B840D825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:05 +0000
Manifest this update: Sun 07 Sep 2025 10:02:05 +0000
Manifest next update: Mon 08 Sep 2025 10:02:05 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: QuzS2PNl7kqm6ygQZWRvo6liZKWOkmd6RFntuVs13+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:32:0a:8a:33:11:c8:be:3f:7c:35:b8:40:d8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Sep 7 10:02:05 2025 GMT
Not After : Sep 8 10:02:05 2025 GMT
Subject: CN=71f3a1eaffe824682a34773525a62418c49dfd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:54:e7:4d:e4:c4:00:fc:40:1a:ff:11:2a:
fb:f9:93:07:46:57:7f:df:3f:d4:76:a7:8d:bc:44:
bd:e3:44:61:23:95:3b:95:0f:be:01:c8:90:c5:4d:
76:ce:dc:b5:c2:3c:6b:b5:c7:99:85:14:d5:9d:cb:
2f:cf:26:a6:4f:12:5c:51:02:12:a4:f0:a8:f1:0c:
71:b1:66:8c:c6:ed:3c:d3:09:3e:6b:35:27:a2:bd:
c9:ec:d4:0c:04:b1:a2:62:86:27:ae:23:55:a7:db:
da:75:10:7e:39:ff:1d:3a:76:6e:59:ea:57:2f:94:
73:6f:b9:f3:62:3d:fc:08:90:15:0a:bf:4d:47:b5:
38:55:5f:07:eb:c4:17:1c:1c:a1:48:9f:1c:8a:dd:
81:8d:90:86:03:f8:db:62:d1:71:c4:b3:e4:2f:7b:
d1:b1:d2:2a:cf:66:c5:81:1f:62:60:3b:40:4a:74:
cc:37:a7:c0:31:76:eb:20:45:34:44:a7:d8:f4:d1:
0a:95:08:a4:27:31:ad:50:21:2a:27:eb:76:e1:13:
65:1d:60:79:07:f9:ec:ce:61:bb:66:a7:84:b4:93:
a8:fa:e6:09:95:18:f0:61:d4:94:d0:8d:27:c7:ad:
b8:55:ad:45:c6:05:36:a2:ff:80:f6:f8:ae:c5:ba:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:A1:EA:FF:E8:24:68:2A:34:77:35:25:A6:24:18:C4:9D:FD:80
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:ff:c5:54:06:2d:f7:84:89:fc:f2:23:e7:e1:28:b6:da:
5c:99:74:a2:04:ad:2b:a6:4d:c0:6b:1e:0c:7e:fc:bc:44:ac:
d3:41:b4:74:7f:3b:ac:85:04:49:74:18:14:11:90:7a:f0:a2:
b8:15:de:5d:15:3d:5f:2b:8a:c5:2b:8f:81:92:5d:00:a9:b3:
8c:4b:2b:3b:1b:7a:48:ba:80:00:7c:11:63:40:12:84:09:7d:
f4:41:36:3a:f2:f0:30:0a:12:2a:0c:3e:2d:8a:56:11:e3:bf:
61:dd:e9:1f:42:a3:94:30:ba:d6:16:ab:cc:25:67:02:58:66:
11:23:6b:12:3d:d8:de:5c:5f:b8:41:de:4e:72:84:57:f4:26:
4b:d3:00:05:2f:2b:60:a6:1e:34:9a:28:7e:40:f7:96:b7:77:
a8:90:aa:9c:80:b0:f1:b9:72:7f:80:a7:eb:50:fb:af:83:7e:
e9:f2:26:8e:98:b0:c7:23:5e:b2:cf:d2:5c:13:70:8f:3d:04:
a9:eb:7e:5d:99:32:59:88:09:1a:2d:1a:33:97:01:0c:b8:79:
42:0a:3a:65:2f:f7:58:93:73:f4:c0:e5:0c:90:e5:29:d1:65:
2a:e3:87:27:55:59:85:41:8d:40:33:3e:0c:3c:92:8a:0c:15:
51:9c:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:01 2025 by rpki-client