Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: LhHTu6HmJGfOXh7fNZUVF62VbzAAHBTuacWn8Ohp/+8=
Subject key identifier: 07:FE:6C:8E:43:1C:BE:B4:89:C0:BD:96:35:B3:1B:B1:B6:CF:A6:BE
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 0199228C9EA4F1EC3E67D3FB715DEA44E0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 1322
Signing time: Sun 07 Sep 2025 05:01:04 +0000
Manifest this update: Sun 07 Sep 2025 05:01:04 +0000
Manifest next update: Mon 08 Sep 2025 05:01:04 +0000
Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: Zz18ClYwdYBq14BrRetOFz2xn2WHIQn0qQVoaghrcZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9e:a4:f1:ec:3e:67:d3:fb:71:5d:ea:44:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Sep 7 05:01:04 2025 GMT
Not After : Sep 8 05:01:04 2025 GMT
Subject: CN=07fe6c8e431cbeb489c0bd9635b31bb1b6cfa6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:e9:3f:ad:8b:de:87:4d:fb:b8:1d:b8:1a:
67:3d:d3:97:33:b9:f7:0c:5f:ff:5b:74:a1:5f:5a:
4b:45:c5:ff:b0:cd:26:cb:56:7a:fe:b2:f4:e3:e6:
ea:3e:62:03:51:bd:57:fc:5f:98:60:a7:bd:97:f7:
94:af:67:a1:01:c6:87:19:95:17:df:7f:4a:f6:8a:
de:d6:b9:14:ec:4d:3b:7b:ec:00:25:94:98:26:cd:
68:6b:3c:aa:f8:cc:be:a1:cd:78:8b:ea:16:a8:66:
38:51:ef:cf:7a:f0:98:75:93:ec:6d:4d:97:9e:0d:
ea:a4:87:c0:aa:67:15:5f:a6:53:10:5f:bf:87:3d:
da:2d:df:0b:14:3f:94:c8:ec:c9:40:90:92:57:2d:
0c:ca:d2:7d:11:23:36:20:f1:50:23:7b:f5:7c:5e:
8b:e7:6a:7e:9f:3b:d1:c0:3d:19:df:e3:0e:dc:c2:
81:56:7b:09:b5:7f:e0:8b:69:9b:ed:f4:99:e8:1e:
e0:a4:e8:97:36:6f:f7:71:9a:b0:49:b8:a8:61:cf:
f0:84:0a:aa:7b:5d:08:11:72:03:76:55:46:5c:79:
00:72:8a:71:bb:80:2b:7c:dd:e8:c4:d4:5b:96:7b:
3a:a0:11:f0:9f:6f:02:c8:52:df:92:7e:3f:34:a5:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:6C:8E:43:1C:BE:B4:89:C0:BD:96:35:B3:1B:B1:B6:CF:A6:BE
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:bc:73:39:23:f3:61:9e:a8:0f:f8:00:f0:cf:44:5d:96:
b7:bd:ea:c9:24:81:29:88:07:89:53:b6:e7:9a:7c:ec:8a:75:
c7:44:dd:d3:ac:f9:a2:8a:79:bb:f2:89:0c:70:18:37:8c:58:
41:a0:95:6d:23:cb:50:fc:d0:ea:e3:d0:bf:77:45:24:3d:15:
35:e1:18:63:7b:19:fd:4e:4c:09:e0:fa:b0:6c:84:e9:1c:67:
1f:d8:36:47:24:00:0c:10:93:16:d3:aa:2d:05:4e:a7:59:38:
b3:22:ce:49:fe:60:36:ff:17:fc:15:0f:8b:a7:72:e8:2f:fc:
04:eb:15:07:35:1d:25:4a:48:fe:7e:02:91:a5:0f:86:7e:d8:
10:ef:e3:c8:11:4c:60:81:3a:eb:ce:a6:01:2d:4a:39:1e:b1:
57:db:2d:a1:70:f2:6a:65:cc:58:c5:aa:ad:31:46:bc:c6:ae:
43:ea:64:12:38:38:d5:1f:85:d9:44:bb:b1:52:22:64:42:12:
21:eb:96:ac:20:68:e4:7b:bf:96:d2:96:0a:f4:d8:06:d5:5c:
65:4d:72:fb:ac:af:ff:34:4a:df:31:8c:31:e3:eb:c5:e4:f4:
99:5f:ef:e5:53:b5:ef:08:56:97:12:e6:b3:03:40:30:83:e7:
94:98:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:30 2025 by rpki-client