Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: poPjABck1DkM340qzB29OgHeMKB+PCWW6zvWgkfNiyM=
Subject key identifier: 79:9E:18:15:4F:4E:05:D9:8A:38:94:50:74:4E:68:AB:6D:C4:20:E5
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 01992255E57683436260C47A8BD67723134B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 15F3
Signing time: Sun 07 Sep 2025 04:01:18 +0000
Manifest this update: Sun 07 Sep 2025 04:01:18 +0000
Manifest next update: Mon 08 Sep 2025 04:01:18 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: fGru2KUyteBt7CehFzAfduecX8N6+1wZh2a+DQqOcD4=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e5:76:83:43:62:60:c4:7a:8b:d6:77:23:13:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Sep 7 04:01:18 2025 GMT
Not After : Sep 8 04:01:18 2025 GMT
Subject: CN=799e18154f4e05d98a389450744e68ab6dc420e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:15:7a:90:48:c2:ed:5d:d5:83:74:4e:2e:
03:58:8b:67:52:36:9e:28:51:2b:18:3e:37:5f:c3:
3c:58:57:a2:1e:47:49:29:53:28:3d:65:d5:01:ce:
d0:2b:27:18:aa:aa:e6:3a:80:2a:55:8d:19:75:2b:
e9:4c:58:93:c1:13:9f:be:46:6f:4c:d4:c4:63:70:
66:c2:59:16:09:d5:12:73:78:65:76:61:2e:04:f5:
1a:48:3a:8f:7f:b7:45:c0:40:ce:5d:88:ce:aa:cf:
9f:46:ec:33:ca:21:5a:5a:98:f4:76:79:f6:09:dd:
f1:c9:10:73:29:a2:5d:7f:7b:52:b0:d4:f7:f8:e1:
c8:bc:1d:b0:05:45:d0:87:db:a1:56:a6:d9:dd:61:
0f:5a:fc:e8:29:99:5e:d0:b0:a3:35:bc:75:a0:a0:
95:28:33:ed:ac:48:eb:01:73:ef:d2:69:11:73:c0:
43:5e:b4:d4:9d:65:79:d9:81:97:34:62:f6:4f:20:
a1:79:4e:60:fc:03:c8:60:f7:48:d8:b8:13:62:f9:
0b:9f:0a:1a:e5:d5:8a:61:f9:5a:24:7b:e7:70:d5:
09:5e:c1:d7:8a:08:bb:b5:0e:a7:ea:96:df:54:ea:
6d:0c:85:9c:e2:a6:c3:69:8e:38:70:0e:23:2d:f7:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:18:15:4F:4E:05:D9:8A:38:94:50:74:4E:68:AB:6D:C4:20:E5
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c7:0b:0a:22:a0:df:e3:07:09:1e:81:e9:20:52:78:36:ef:
53:f0:5e:ef:8b:6f:05:54:0a:92:55:ee:d9:92:e2:3c:f2:54:
9e:20:28:49:3d:b7:72:22:f5:25:8d:99:8b:13:2e:70:7a:ea:
00:57:b2:26:3e:24:aa:a0:cf:47:9e:75:d2:73:7d:e8:ed:6f:
d8:60:8a:55:fc:b0:aa:5d:76:b1:2c:04:c5:62:a5:c6:38:21:
a0:7d:e6:60:fb:99:3b:1e:39:e9:45:6e:7b:b7:08:58:b1:7a:
1c:6a:0c:42:a6:0c:6d:31:7f:b3:89:31:49:af:2c:88:dd:74:
b8:52:e6:00:7f:49:0c:4c:d4:f6:4f:10:22:22:e9:08:2d:38:
86:7a:84:f6:9d:f9:32:f5:3a:0c:91:a3:06:fd:7d:aa:bd:fe:
3c:21:cf:6b:bb:2a:94:d4:2b:7c:4c:91:07:5c:a4:6e:8f:e0:
b7:96:51:4c:e6:c6:46:f7:d2:92:95:14:40:a2:f6:52:ee:88:
86:ae:d7:39:df:99:97:48:7c:16:22:ee:99:8e:f2:cc:0a:56:
e7:99:1f:20:c1:25:70:1e:27:15:49:cd:17:c2:10:c3:65:16:
23:85:30:29:98:45:7f:46:3e:51:12:e3:a9:c3:d7:e5:4f:ce:
9a:4d:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:14 2025 by rpki-client