Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: /ZMVmXepsEHJEoRqz1Veuy0oj4YUsqFwonyAmA8QFKE=
Subject key identifier: B1:75:42:BD:CD:C2:E4:EF:88:7D:E7:99:9A:77:4A:0D:6D:79:7A:9A
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01993191FCFF9D9C17BFC202D8417C26EFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0ED9
Signing time: Wed 10 Sep 2025 03:01:14 +0000
Manifest this update: Wed 10 Sep 2025 03:01:14 +0000
Manifest next update: Thu 11 Sep 2025 03:01:14 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: boqX/At8XF/NwAStC7LuRpwE/4dwu6ETPUcN/kX2s6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:fc:ff:9d:9c:17:bf:c2:02:d8:41:7c:26:ef:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Sep 10 03:01:14 2025 GMT
Not After : Sep 11 03:01:14 2025 GMT
Subject: CN=b17542bdcdc2e4ef887de7999a774a0d6d797a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:2e:06:b3:1b:f8:8c:62:3b:b6:88:23:44:
24:1a:3e:8f:c8:90:a0:d0:1d:e0:0e:8a:aa:f0:37:
18:56:3a:98:4e:37:12:03:95:7d:e2:c1:a6:0c:89:
d9:6c:c3:68:71:f1:d2:f4:1d:9e:f0:e9:52:6a:e8:
44:ef:69:a1:1d:6e:ef:58:d3:8b:4c:43:77:33:fc:
fd:a7:c5:96:7b:e5:34:be:6f:be:b4:5d:10:1f:2c:
92:c1:e9:d2:0f:09:d1:ca:65:f0:a9:fe:f1:d1:4a:
6b:cf:92:c4:fd:85:b3:4c:45:41:70:ee:1e:26:85:
47:cb:5c:b7:fb:58:db:76:24:b5:bb:c6:9c:36:e7:
02:a6:c7:40:40:64:b7:bd:8b:75:b7:55:d8:22:f8:
7b:31:43:61:17:f0:60:70:a2:87:1d:1d:bd:74:12:
48:0c:9d:1e:bd:74:fb:3b:62:5b:58:2c:72:de:b4:
df:c4:46:ed:23:95:30:cc:0a:53:fd:9a:39:66:90:
0b:2d:5e:12:41:2b:82:2d:d6:a0:d6:fe:c2:4a:a6:
e3:6c:e7:04:6a:e2:1b:f1:13:2f:bf:38:ee:3a:f6:
5b:26:b6:41:71:b8:b2:71:9a:0e:fc:2c:4a:d7:89:
c9:8e:8c:e7:ef:6b:6c:03:a1:e4:49:73:a9:ed:3e:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:42:BD:CD:C2:E4:EF:88:7D:E7:99:9A:77:4A:0D:6D:79:7A:9A
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:31:bd:f5:2e:bc:a4:e9:25:c7:14:d1:96:9c:51:54:06:
60:e3:7e:53:91:b1:0a:dc:76:57:7e:07:3e:dd:3c:17:6d:a1:
59:64:96:28:06:b7:b9:a8:03:24:5d:b3:2d:64:b9:da:9c:46:
58:c4:58:d2:a5:9d:e2:1d:a5:0c:12:0c:28:e9:84:0b:e2:8e:
47:7c:40:78:53:29:34:0f:bb:45:9c:1d:4c:fc:92:51:01:49:
bf:76:57:7a:02:d8:98:d1:3d:e6:52:3f:02:a6:99:6a:58:8a:
eb:3f:98:b6:c8:fb:5e:d2:0c:ef:a5:2c:97:0f:ae:8e:b2:68:
68:cc:1a:5f:37:e4:c7:2f:8d:95:c4:b0:ef:9b:84:d4:f6:81:
e9:02:a0:c4:f4:a0:6e:bb:1c:98:9e:2a:10:29:ef:4c:2e:33:
87:d6:58:1d:2d:6a:36:ef:13:52:95:34:07:e6:be:aa:06:81:
2c:e7:46:0c:a0:16:76:14:a8:c5:60:67:a5:f4:11:10:70:76:
6e:56:6e:56:f2:e3:80:3f:ce:26:be:cc:4a:6e:56:67:9c:af:
e9:7a:a9:73:a0:1d:6f:f8:36:e7:e8:db:d6:94:e7:94:ab:d0:
95:c4:ff:0b:9a:62:99:bd:fb:f5:95:72:ce:33:98:cd:3e:05:
f3:69:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:25:46 2025 by rpki-client