Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: F3KMIQG1zA56ooETAOTxJozNX4gKmPtvl8WMI78ZKpA=
Subject key identifier: 7B:85:E6:AD:FC:C2:F2:A9:53:E4:0B:79:9E:96:48:AD:89:7C:A1:42
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 0199221F2D5BEEDD6DA72BD4E40B880357B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: ZKlYpmqfSxkMwMSW0aFgXTEZCZtGX0PmWV/BsBvJ/fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2d:5b:ee:dd:6d:a7:2b:d4:e4:0b:88:03:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=7b85e6adfcc2f2a953e40b799e9648ad897ca142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:6b:99:30:a9:45:26:e6:99:9d:cf:37:f4:
68:70:40:12:49:ba:8d:02:79:e9:0c:8e:46:ff:48:
6c:8d:ec:60:19:89:ed:66:bd:e7:e6:fe:6b:fb:ee:
0d:d9:94:86:75:bf:2e:dd:b7:14:37:0b:62:ae:43:
e4:10:4f:b1:eb:4a:23:ef:cb:51:e6:5c:32:19:b2:
b3:d8:19:12:ea:a3:06:52:d0:7a:22:28:96:46:a1:
5a:2c:cc:a9:a1:fd:05:c4:ca:48:08:59:53:b6:fc:
a2:0d:32:cb:0f:d1:11:a3:55:2e:7b:c4:72:a5:60:
4d:65:e3:71:0a:39:a1:6d:f6:d1:58:4a:b9:73:77:
bf:30:f7:38:7d:d2:ee:66:29:14:49:b5:6e:0e:68:
70:0b:e0:95:ff:b3:e0:a4:10:42:04:da:85:cf:8b:
f8:f8:6b:56:92:37:b1:ec:1f:f1:17:bc:2d:a1:94:
bb:32:a5:3c:8c:03:a9:9b:37:6c:09:24:fd:f8:52:
9e:9f:de:d7:ac:45:a1:e4:c9:5e:76:2d:51:30:06:
26:6c:5c:02:45:a6:0a:dc:8f:b0:35:8c:d7:da:d1:
5e:9b:f4:1a:2f:0f:1a:dd:98:ea:80:78:43:b6:48:
7f:ec:47:b0:94:8d:dd:f8:7c:4f:2f:1a:76:5b:1b:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:E6:AD:FC:C2:F2:A9:53:E4:0B:79:9E:96:48:AD:89:7C:A1:42
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e3:37:27:ec:a1:04:e3:d9:11:a0:b9:3e:b7:5e:a6:ac:c4:
a6:bb:53:9f:77:b5:c7:16:3b:04:7b:cf:94:3c:22:18:65:a7:
1e:e3:74:c2:70:c8:f0:17:c9:d6:f9:75:0d:1d:b8:06:2e:5c:
e6:85:5d:c8:c1:36:55:8a:e7:fc:49:05:ab:01:b6:50:26:2b:
74:8f:c0:06:7b:51:e3:e0:79:a8:60:e9:ea:90:41:7e:e1:e9:
78:66:7a:58:51:34:15:6d:35:3e:1e:59:b8:25:8a:f3:07:8c:
1b:d7:dd:87:c1:21:0a:ff:e5:17:d7:d3:9a:30:db:1e:3c:35:
45:84:e1:cb:e8:e1:7c:80:7a:f9:56:ec:af:34:70:04:13:40:
84:38:af:28:14:43:b1:5a:40:17:be:a2:95:a4:94:c6:e1:16:
79:ea:6f:ea:19:c7:f0:73:4d:8c:94:a1:d7:ff:78:33:45:77:
5f:5b:0e:d9:2f:6a:19:0d:ef:b5:e1:48:d3:d4:9d:0e:fb:03:
f2:e8:e9:78:f8:2d:8a:9b:db:04:e0:4f:97:89:04:b9:a8:f6:
f9:f6:02:94:69:37:3b:73:17:7c:4d:5c:fc:31:38:d7:99:1c:
be:c8:df:77:5d:82:d8:ad:77:76:28:e2:3e:9c:97:8c:b1:0e:
a8:e0:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:06 2025 by rpki-client