Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: KISoJhev9V0aTdLBADgR01tow1eLq1n2MOBSk8A3SbI=
Subject key identifier: 96:B2:AB:77:1F:AF:4C:E5:C5:2E:66:D7:F2:29:01:F9:99:A0:2D:99
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 019935DC185E3B01D59F2FCCBDB6EED45156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 23:00:40 +0000
Manifest this update: Wed 10 Sep 2025 23:00:40 +0000
Manifest next update: Thu 11 Sep 2025 23:00:40 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: TlkFColOi34OfaNSbYxIJuRbHTOBEb4LrjKVjdfIGRo=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:18:5e:3b:01:d5:9f:2f:cc:bd:b6:ee:d4:51:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Sep 10 23:00:40 2025 GMT
Not After : Sep 11 23:00:40 2025 GMT
Subject: CN=96b2ab771faf4ce5c52e66d7f22901f999a02d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:d4:17:e8:28:3c:18:49:df:03:34:88:c9:
fa:16:79:67:68:98:08:68:84:5c:fe:d8:7f:10:a6:
bb:0e:18:26:0e:83:25:1b:5a:9d:23:25:ec:7d:23:
2c:80:16:66:69:86:f6:db:d8:7e:3b:05:c1:0b:83:
cc:f8:28:bd:e8:b9:f2:43:4f:03:f0:4f:e3:60:e5:
46:fb:b6:00:7f:65:35:e3:7a:db:fc:51:4f:dd:f9:
13:3b:7b:dc:41:c0:8d:f7:53:29:be:80:2b:37:64:
2c:f9:e7:62:13:ac:6e:d9:e4:cb:a1:47:2f:e4:c3:
73:49:7b:49:4c:5a:6b:37:bc:0f:e1:d0:f1:bc:b0:
86:2d:19:21:b1:f5:0e:c7:6e:b5:e6:18:31:4d:b1:
a8:9b:5e:f6:93:63:7f:8b:55:b6:9a:0a:dc:8d:10:
c3:cc:dd:ec:84:3d:e9:1d:fe:d7:93:29:34:15:0d:
f6:96:9f:ed:38:a7:2b:c6:75:a5:87:b8:8b:86:a4:
01:fb:c0:91:62:06:6b:9d:37:3d:73:f4:c3:98:8d:
91:d5:15:6b:a1:97:a9:d2:ab:2e:25:8e:16:f5:cd:
0c:b1:82:49:a1:4f:09:28:3d:80:31:06:8d:dd:a1:
0b:28:5e:19:b4:f6:4a:d0:b1:80:7a:68:a8:1f:88:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:AB:77:1F:AF:4C:E5:C5:2E:66:D7:F2:29:01:F9:99:A0:2D:99
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:93:20:49:9b:7e:a7:d7:94:b4:7f:c7:b6:b3:1b:03:b8:b0:
08:ff:92:6b:d3:72:81:4c:8d:b2:6a:af:81:d7:07:45:bf:27:
35:dc:2e:e5:cc:6f:d5:28:26:41:5b:94:42:05:75:59:d1:a4:
bd:62:02:ba:f8:42:93:b8:34:ae:69:a3:ad:7a:63:18:80:11:
70:c4:dd:4f:ce:6e:e3:4d:49:41:44:8a:8d:48:83:81:f5:fa:
c1:aa:4f:9c:c5:d2:d2:aa:45:41:f4:9a:f4:27:59:df:12:84:
ec:e3:5f:c8:3d:c1:4e:b6:4c:a3:7e:99:3f:5d:3d:e0:9b:1f:
11:6e:00:6a:74:fa:65:f8:2e:9e:f3:ab:2b:19:35:3d:21:df:
c4:70:c6:b8:16:20:15:25:bd:3c:c3:c9:71:31:84:73:e6:4c:
6d:e8:7a:e7:8c:13:46:a4:8f:80:b2:0f:37:fa:fe:32:98:21:
f8:80:2a:d2:e0:60:bf:10:b1:2e:1f:3b:9a:98:05:15:3a:01:
33:e2:93:c6:0a:7b:75:fc:95:7d:c5:70:81:28:87:cb:52:e7:
42:42:b1:35:b8:14:a9:ac:c3:ef:cb:32:03:61:4c:29:70:78:
24:20:a7:3c:b8:9c:af:ec:de:17:ce:87:ef:02:1a:a5:19:a1:
50:d7:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:49:58 2025 by rpki-client