Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: AS9oSOQ4f3MFl4GdgZ3BnJbn/IMMfGextja87x/qzbw=
Subject key identifier: 84:32:CC:28:B1:7E:4C:A2:4E:62:AF:4C:F9:AE:B8:6B:B1:8E:26:79
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019923315952D6BF8CC88DF5D9D0E1F366BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:01:00 +0000
Manifest this update: Sun 07 Sep 2025 08:01:00 +0000
Manifest next update: Mon 08 Sep 2025 08:01:00 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: ZQ7MRxoa9F44U4xDzQvvSSsTtmlwburk+d+yOVFVpXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:59:52:d6:bf:8c:c8:8d:f5:d9:d0:e1:f3:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Sep 7 08:01:00 2025 GMT
Not After : Sep 8 08:01:00 2025 GMT
Subject: CN=8432cc28b17e4ca24e62af4cf9aeb86bb18e2679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:df:30:b6:8e:56:1f:db:87:8b:cc:77:e7:
e2:6f:e8:78:b3:47:64:ec:10:e4:ab:fa:f3:ae:5a:
f1:bf:0c:af:9f:c9:96:f1:db:a9:a5:64:cc:b7:ea:
ae:b2:5d:6a:c4:f9:fd:43:9b:9c:d3:7c:90:05:e3:
f5:e6:61:08:31:4c:dd:2d:4b:68:69:d2:aa:6d:a0:
e6:1c:a5:dc:dc:e5:3f:b3:c3:0b:ab:09:16:13:d6:
46:6b:31:28:55:fe:83:dd:a1:11:19:cd:13:0b:70:
1e:2d:65:73:3e:fb:09:48:a6:2b:0b:d8:0f:5d:0a:
f3:3e:99:83:96:22:0c:09:6c:d0:4d:ce:a3:61:ab:
8c:25:5d:64:17:9c:bc:9d:f0:97:a4:a2:24:87:0e:
26:37:00:02:87:6c:2c:52:ad:0b:b0:11:70:fa:6b:
34:92:5d:3f:d0:31:3e:7b:2c:49:84:67:fb:33:82:
ab:bb:d7:50:dc:3e:b2:f7:37:47:e6:de:2e:16:19:
0c:7c:b5:49:39:43:42:ff:1f:9a:1c:c5:4f:12:3a:
5b:49:19:74:d9:0d:6a:73:c7:ff:87:2e:f6:66:50:
21:9d:3e:b5:1f:23:c9:61:7f:df:6b:9d:77:97:85:
e7:83:16:a0:17:5c:05:be:15:05:bb:22:2c:c9:8c:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:CC:28:B1:7E:4C:A2:4E:62:AF:4C:F9:AE:B8:6B:B1:8E:26:79
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:5d:a5:d6:f0:ac:87:b1:76:0a:09:ca:c5:51:2f:24:f9:
6c:ca:9c:e0:9b:ad:77:8e:e1:02:46:5f:fc:47:5d:18:53:b7:
28:a0:8b:f2:f2:c7:1b:6e:2e:c2:d1:4e:de:8c:6c:c1:ac:de:
3b:6f:11:42:ed:85:c8:70:e9:42:96:6f:6b:c8:a3:5e:dc:2e:
ed:d7:e1:6e:67:7e:c7:28:0e:51:0f:3c:6f:b7:f7:b8:ee:ae:
ca:f9:b5:29:03:70:5e:b1:40:62:59:e1:09:52:4c:95:7a:57:
aa:35:55:d6:3e:3c:f9:6b:cb:2b:7f:a0:fe:8b:1d:02:43:5b:
4f:92:ce:ae:6c:4d:86:2a:d1:b7:75:38:46:d1:99:86:c1:a1:
96:86:6e:48:65:44:95:97:1d:40:73:5c:f6:8c:37:bb:23:9e:
7a:54:e2:17:78:80:d0:f1:f0:50:c1:98:ef:32:95:6f:c4:3e:
ea:0d:ab:3d:ed:77:f4:1d:0d:d9:0d:d8:1e:fb:6f:12:4f:88:
77:9c:1a:94:3e:50:36:97:50:ef:e9:0a:3d:40:b3:36:37:bf:
59:36:24:e0:19:a0:45:c1:38:60:0c:67:5b:be:e9:f3:48:06:
95:86:8e:67:91:2c:52:5d:d5:10:25:a4:f8:0e:99:e8:ca:d6:
05:87:83:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMVlS1r+MyI312dDh82a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjUwOTA3MDgwMTAwWhcNMjUwOTA4MDgwMTAwWjAzMTEwLwYDVQQD
Eyg4NDMyY2MyOGIxN2U0Y2EyNGU2MmFmNGNmOWFlYjg2YmIxOGUyNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWjfMLaOVh/bh4vMd+fib+h4s0dk
7BDkq/rzrlrxvwyvn8mW8duppWTMt+qusl1qxPn9Q5uc03yQBeP15mEIMUzdLUto
adKqbaDmHKXc3OU/s8MLqwkWE9ZGazEoVf6D3aERGc0TC3AeLWVzPvsJSKYrC9gP
XQrzPpmDliIMCWzQTc6jYauMJV1kF5y8nfCXpKIkhw4mNwACh2wsUq0LsBFw+ms0
kl0/0DE+eyxJhGf7M4Kru9dQ3D6y9zdH5t4uFhkMfLVJOUNC/x+aHMVPEjpbSRl0
2Q1qc8f/hy72ZlAhnT61HyPJYX/fa513l4XngxagF1wFvhUFuyIsyYyCiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQyzCixfkyiTmKvTPmuuGuxjiZ5MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfxdpdbw
rIexdgoJysVRLyT5bMqc4Jutd47hAkZf/EddGFO3KKCL8vLHG24uwtFO3oxswaze
O28RQu2FyHDpQpZva8ijXtwu7dfhbmd+xygOUQ88b7f3uO6uyvm1KQNwXrFAYlnh
CVJMlXpXqjVV1j48+WvLK3+g/osdAkNbT5LOrmxNhirRt3U4RtGZhsGhloZuSGVE
lZcdQHNc9ow3uyOeelTiF3iA0PHwUMGY7zKVb8Q+6g2rPe139B0N2Q3YHvtvEk+I
d5walD5QNpdQ7+kKPUCzNje/WTYk4BmgRcE4YAxnW77p80gGlYaOZ5EsUl3VECWk
+A6Z6MrWBYeDbA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:37 2025 by rpki-client