Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 3iCUB6QDufc+H/xeedwYU6NUwc+CW3Z9EGzRecefLdo=
Subject key identifier: 51:BF:1E:8A:AB:37:17:D1:7D:99:DA:08:5E:38:0F:8E:2C:CF:FD:85
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 0199221EAFAED13742B0616BADD423B10DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: wE9ApVTi9ObX3UgH2YHZcza/PxXsDqDrPMawOlvCgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:af:ae:d1:37:42:b0:61:6b:ad:d4:23:b1:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=51bf1e8aab3717d17d99da085e380f8e2ccffd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:d4:c5:db:d0:fe:06:72:03:0d:20:c0:63:
b5:86:99:94:10:b7:11:69:7f:76:e3:fd:d3:50:2f:
d7:34:c8:7e:be:de:d4:13:be:3f:06:54:f7:bd:bd:
42:76:ac:50:65:66:d8:04:db:f6:f8:31:aa:90:e6:
a8:5b:de:d4:32:77:29:89:3b:03:e3:67:9d:dc:f2:
c0:cd:c7:0e:e3:5a:71:59:fc:35:f5:91:09:4e:c3:
ec:b0:d8:9b:6b:a4:76:fc:de:4b:1e:7b:d5:50:bd:
52:c9:40:f8:e2:b4:ff:b6:8a:da:1d:d6:66:45:14:
be:9c:ef:0b:24:94:5d:79:d8:da:52:14:2e:d1:11:
27:08:c2:80:31:6e:89:46:dd:e7:55:c1:8b:ce:12:
ab:66:78:72:ad:08:4b:3f:4a:ca:3d:2c:37:37:93:
c7:72:23:3a:4b:14:47:b3:d9:b6:3b:5a:cc:eb:98:
3a:e7:4c:cb:18:51:b8:37:f0:b4:a2:48:3d:0b:9e:
0a:4e:c6:86:4c:f5:7d:3b:9a:79:cf:39:1a:b1:81:
6c:c2:67:36:56:f2:59:e4:7c:ab:26:11:61:50:f8:
4f:95:04:2e:81:78:68:3c:c8:0c:43:00:d5:68:4d:
9c:7a:64:e3:ea:a8:30:ce:95:16:5b:dc:5e:c2:da:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:1E:8A:AB:37:17:D1:7D:99:DA:08:5E:38:0F:8E:2C:CF:FD:85
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:1e:a3:2b:f3:a0:ad:4c:c2:5d:b2:30:91:82:ca:6f:4a:
72:a7:aa:f4:67:e4:c3:3d:76:e1:b0:a4:18:fd:36:2a:aa:5d:
28:24:c3:15:1e:f3:13:2c:64:a6:35:2c:2f:ec:8b:59:2b:fd:
78:d8:2a:b8:8a:b6:96:50:1e:6d:a5:ac:43:4f:b5:e9:79:c1:
44:0e:26:1c:7d:29:bf:67:03:86:d4:f2:90:db:22:d2:25:92:
14:16:40:53:9a:56:7f:ce:86:fc:94:70:2f:9d:6e:e2:9a:04:
82:f3:78:46:86:55:e0:a5:47:a3:63:7d:f6:36:0a:3b:f0:37:
ea:4f:f4:36:0a:04:70:ed:10:25:db:cd:56:28:11:f1:2e:80:
3c:8c:e0:4e:86:38:a0:5d:3c:96:25:0a:20:65:92:fc:81:c5:
ea:38:e5:7e:15:cc:56:04:3f:ad:b8:a0:12:37:bb:96:49:13:
0d:8b:f2:4e:0f:76:2b:6b:ed:9d:f9:5a:cf:f9:2a:71:80:c6:
b3:16:45:35:11:ef:b7:88:20:89:91:77:2a:c0:52:9e:50:4e:
02:65:6d:81:ec:1c:5e:9c:33:33:4a:03:80:93:38:7a:04:8e:
0d:e5:4a:d4:c0:2d:e9:61:a3:98:87:db:da:48:ca:ca:98:da:
82:07:c3:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHq+u0TdCsGFrrdQjsQ3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi
MWQ5MmIwHhcNMjUwOTA3MDMwMTAwWhcNMjUwOTA4MDMwMTAwWjAzMTEwLwYDVQQD
Eyg1MWJmMWU4YWFiMzcxN2QxN2Q5OWRhMDg1ZTM4MGY4ZTJjY2ZmZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjUxdvQ/gZyAw0gwGO1hpmUELcR
aX924/3TUC/XNMh+vt7UE74/BlT3vb1CdqxQZWbYBNv2+DGqkOaoW97UMncpiTsD
42ed3PLAzccO41pxWfw19ZEJTsPssNiba6R2/N5LHnvVUL1SyUD44rT/toraHdZm
RRS+nO8LJJRdedjaUhQu0REnCMKAMW6JRt3nVcGLzhKrZnhyrQhLP0rKPSw3N5PH
ciM6SxRHs9m2O1rM65g650zLGFG4N/C0okg9C54KTsaGTPV9O5p5zzkasYFswmc2
VvJZ5HyrJhFhUPhPlQQugXhoPMgMQwDVaE2cemTj6qgwzpUWW9xewtpkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG/HoqrNxfRfZnaCF44D44sz/2FMB8GA1UdIwQY
MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt
ZWQxNDJlNDY0MzM1LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1
LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqUeoyvz
oK1Mwl2yMJGCym9Kcqeq9Gfkwz124bCkGP02KqpdKCTDFR7zEyxkpjUsL+yLWSv9
eNgquIq2llAebaWsQ0+16XnBRA4mHH0pv2cDhtTykNsi0iWSFBZAU5pWf86G/JRw
L51u4poEgvN4RoZV4KVHo2N99jYKO/A36k/0NgoEcO0QJdvNVigR8S6APIzgToY4
oF08liUKIGWS/IHF6jjlfhXMVgQ/rbigEje7lkkTDYvyTg92K2vtnflaz/kqcYDG
sxZFNRHvt4ggiZF3KsBSnlBOAmVtgewcXpwzM0oDgJM4egSODeVK1MAt6WGjmIfb
2kjKypjaggfDuQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:14:59 2025 by rpki-client