Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: PcXQw7/wDm/Z1jWZpQa6KXl67rc2FBMNi3i47G13ybI=
Subject key identifier: D1:9E:16:2E:70:C6:9A:44:72:D5:3A:AD:7C:53:10:AD:89:2A:20:B2
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 01992D4705EBB1DF3423AE73BE26850AA9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 1284
Signing time: Tue 09 Sep 2025 07:00:52 +0000
Manifest this update: Tue 09 Sep 2025 07:00:52 +0000
Manifest next update: Wed 10 Sep 2025 07:00:52 +0000
Files and hashes: 1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=)
2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: XsSXtJIVcuj6KSdMffoXEbOq8vkC3agEgTzb0I3w+ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:05:eb:b1:df:34:23:ae:73:be:26:85:0a:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Sep 9 07:00:52 2025 GMT
Not After : Sep 10 07:00:52 2025 GMT
Subject: CN=d19e162e70c69a4472d53aad7c5310ad892a20b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:87:4a:91:8e:1a:64:58:2e:cb:b0:bd:3d:
e9:df:1a:72:5f:f9:7b:e4:e7:ae:e0:d1:84:43:04:
25:5f:57:cc:5e:0f:03:70:0f:2d:4f:f7:78:85:e5:
e1:6b:aa:56:69:10:77:8f:4a:87:87:28:78:94:06:
95:87:1f:80:25:5f:12:02:db:cd:b3:ec:39:84:28:
c5:bb:f0:91:3b:13:5c:30:36:c5:be:ee:71:eb:94:
fc:22:9f:7f:1f:7a:fe:c0:af:cc:d7:17:08:c6:b1:
19:d5:18:67:e9:12:9a:0d:97:85:e2:da:42:e2:db:
34:30:ef:84:23:39:0a:97:ba:d4:dc:31:74:e3:81:
47:95:02:89:90:1a:58:b5:9a:78:4b:e9:54:7a:32:
ae:c6:dd:6c:ef:a6:dd:75:43:23:9f:ed:54:17:a9:
c8:58:76:f6:e8:2f:89:03:f8:84:c8:b9:4a:f2:44:
62:f7:52:bd:19:51:e3:6c:ca:9a:0e:e9:86:c7:6f:
fb:76:bd:c0:44:fa:9c:60:cd:f7:f2:c4:46:60:3a:
da:38:72:69:c6:8f:6b:40:14:d9:32:70:09:93:51:
10:57:88:fa:53:50:f2:12:32:2f:0e:99:17:11:48:
93:d1:08:b1:86:15:3c:3f:70:4e:66:4e:49:48:28:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:16:2E:70:C6:9A:44:72:D5:3A:AD:7C:53:10:AD:89:2A:20:B2
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:66:bb:89:d1:17:a9:1b:06:dd:6c:a7:d6:c8:aa:38:7a:37:
2c:4f:ee:30:62:18:1e:12:6f:e4:6b:70:bc:cf:95:67:fb:04:
d7:a2:eb:97:32:91:60:91:e2:b8:99:87:8b:43:1c:b8:39:f6:
82:72:2e:5c:00:1f:49:66:12:d9:d8:9d:7b:34:c5:9f:f8:8a:
5e:80:19:ca:21:d5:29:21:e3:10:ad:32:2f:8c:a8:36:95:6e:
f8:75:68:aa:08:df:44:89:e0:95:67:51:ca:11:18:28:ca:ff:
4c:fa:ab:f2:ae:5a:f1:df:5f:fc:27:2d:89:7d:5f:72:f2:eb:
af:a5:33:34:15:32:5c:86:1c:9b:b6:e1:d9:1d:32:63:f1:89:
c8:d2:27:3d:ad:ea:da:25:83:f3:76:d7:19:bf:60:96:f2:2d:
40:f4:66:4b:98:69:01:0d:52:d7:e5:de:e3:65:81:c3:e5:1f:
c6:6a:ae:29:7b:24:d9:76:5c:3c:fc:db:fb:3e:5b:ee:4a:f7:
73:4c:3d:fb:f1:55:ef:a5:a9:8b:c8:15:74:2e:0c:04:1b:48:
81:ff:9b:40:cd:10:d1:d5:86:67:88:29:a2:be:78:56:1e:3b:
6e:3e:6f:0b:09:ad:5c:cf:d8:38:74:26:76:6b:8f:aa:99:d0:
1b:f8:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:32:12 2025 by rpki-client