
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: Ljo3c57/pf1vV4l6/jJEbH1lu5jN46RFbwCd+dn5LuQ=
Subject key identifier: 15:9F:E1:B6:7D:4F:DC:83:E3:F1:1B:25:33:70:37:AF:B5:05:B0:AA
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019922FA719C861EF89E7C30A20707B5ABB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 092E
Signing time: Sun 07 Sep 2025 07:01:02 +0000
Manifest this update: Sun 07 Sep 2025 07:01:02 +0000
Manifest next update: Mon 08 Sep 2025 07:01:02 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: jmQuZml0QzYFjhMSCkvT5BBFLG89hkbBASLqtVMVTFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:71:9c:86:1e:f8:9e:7c:30:a2:07:07:b5:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Sep 7 07:01:02 2025 GMT
Not After : Sep 8 07:01:02 2025 GMT
Subject: CN=159fe1b67d4fdc83e3f11b25337037afb505b0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:ac:57:ad:f3:e9:9c:ab:58:8c:60:2b:18:
c4:44:5e:f6:a8:4b:d2:81:56:b2:ba:11:b2:9c:28:
42:ab:f2:71:c8:37:05:98:51:1f:23:b5:26:ed:f4:
2e:9d:a4:a5:ff:19:ff:91:ae:a0:6f:78:fc:2f:36:
05:80:68:49:ea:32:c5:32:fc:53:50:18:17:f0:81:
ec:9e:6e:ed:0a:37:bc:ef:01:e4:d2:06:f5:5c:6a:
7c:54:ec:09:cd:b0:76:57:3c:bd:c8:08:f3:d6:49:
11:66:04:c6:7b:3e:2b:79:b2:df:e4:54:c6:ae:c6:
ec:7a:0f:be:7a:ad:6f:d1:da:67:1a:41:e3:8b:81:
0c:c0:ab:5c:8f:d1:dd:37:d1:9f:2b:b9:15:1b:4a:
28:98:21:dd:73:1d:43:1f:a8:7c:fc:9a:8a:0a:66:
99:60:c3:48:58:5a:a1:84:ec:ab:4f:4e:48:65:b3:
46:8a:32:67:ff:b3:13:8c:32:2a:ba:a9:9b:a1:bd:
ec:f9:cf:a4:96:48:da:77:db:0d:c8:ba:d2:1e:8f:
16:06:02:04:14:23:9d:4d:69:6d:56:d1:e6:af:27:
a2:fb:68:aa:4f:9e:05:39:45:8c:29:26:3a:a2:96:
85:23:13:e4:c1:67:9d:8b:1f:4b:9a:bb:37:6b:72:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9F:E1:B6:7D:4F:DC:83:E3:F1:1B:25:33:70:37:AF:B5:05:B0:AA
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8c:3f:c8:71:1a:aa:32:b0:9b:3f:a7:d3:37:e1:6b:ca:59:
50:cd:b4:c4:a4:7e:68:9b:ac:fc:cf:7b:89:e1:a7:1d:8d:7c:
f5:6e:9a:67:e0:2c:90:db:e8:f5:8c:73:44:82:c6:f8:19:96:
4c:7d:54:16:a9:1f:15:91:dd:9c:fe:91:d1:97:77:af:46:88:
ad:44:ee:f6:84:81:ae:53:f2:15:a7:76:07:ea:28:a1:79:76:
1c:3e:7b:02:65:a9:bb:c6:46:d0:14:e5:1e:97:45:5c:b1:33:
c3:f2:34:45:14:7b:9c:94:da:b6:b9:d9:f0:5e:fb:e9:f3:13:
82:4e:df:c0:2f:c6:c9:ee:79:93:5c:10:f5:da:e4:b1:14:e7:
5b:ae:e5:37:8c:eb:0e:08:dc:c6:c2:6f:76:7d:97:56:5e:7c:
07:7e:51:ad:ed:5b:bb:77:39:a0:f2:32:b9:de:69:2d:67:2f:
49:b1:22:92:e6:ee:87:e7:b0:d1:d9:14:a9:02:ab:9e:00:4a:
c8:3a:e6:43:2b:dd:0f:55:a4:44:a4:ba:4a:2e:f8:7d:a9:35:
21:13:6c:c6:57:5e:97:43:c2:e2:d1:7e:e5:c1:d6:33:16:39:
a6:4c:65:42:54:70:85:6a:0b:a7:04:fd:69:d5:7f:a1:51:ea:
78:fc:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:34 2025 by rpki-client