Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: LDMv+72iBOoElbHukMTpZbCE2oXeqCE60zqr6tbuZSc=
Subject key identifier: 06:BD:88:03:4C:81:2C:AC:20:D4:DA:C3:4B:0C:0D:46:94:1C:4A:DB
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 0199240C99AB167F3026A6882E69CCD7201B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0BBC
Signing time: Sun 07 Sep 2025 12:00:29 +0000
Manifest this update: Sun 07 Sep 2025 12:00:29 +0000
Manifest next update: Mon 08 Sep 2025 12:00:29 +0000
Files and hashes: 1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: xGscNIu4PImu5Lv+ksfXFxd9uqo220ComHGXpC0JHhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:99:ab:16:7f:30:26:a6:88:2e:69:cc:d7:20:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Sep 7 12:00:29 2025 GMT
Not After : Sep 8 12:00:29 2025 GMT
Subject: CN=06bd88034c812cac20d4dac34b0c0d46941c4adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:0a:42:32:44:a5:b9:1a:30:26:ba:9e:64:
ba:d2:33:d3:4d:ef:6c:37:0c:08:30:69:0c:8d:80:
8a:40:94:87:49:e7:02:2c:33:17:e2:ad:ff:e9:fc:
50:2e:28:e6:6f:74:72:89:b7:ff:9b:14:27:78:0a:
17:af:82:a3:e7:d3:f6:3c:42:7f:f0:4b:87:64:dc:
a4:72:ac:70:61:cf:c1:b6:15:b3:be:5a:28:0b:19:
b5:d7:c6:30:8a:c7:e3:38:65:9b:67:1d:53:a9:5c:
03:c2:59:aa:a6:b4:55:35:07:4c:c1:bd:eb:cd:d8:
3c:c3:29:58:44:e0:28:2a:95:ae:32:a4:34:ce:70:
94:bd:33:eb:9e:e6:86:40:9e:d8:5d:5f:c6:96:b3:
5a:fa:f6:6f:7e:0e:44:27:ed:62:36:72:61:06:31:
23:ba:86:16:b3:cd:0e:75:09:a8:67:9a:21:b1:b6:
32:7e:9a:f0:ed:45:e3:1f:77:1b:c1:3d:29:69:ad:
bb:fe:21:54:ed:51:b7:ff:c0:e5:44:43:4f:06:39:
43:05:81:02:2f:e9:76:90:fc:ce:c3:d5:5d:15:a2:
c1:b4:d9:f3:c5:ba:21:e9:77:46:29:06:3c:d0:65:
c9:f1:0a:f8:ad:45:dd:55:22:90:27:03:26:3c:79:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:88:03:4C:81:2C:AC:20:D4:DA:C3:4B:0C:0D:46:94:1C:4A:DB
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:73:35:57:25:cc:17:44:9c:70:ac:58:c9:c2:1c:72:80:dc:
e3:32:5a:d7:c0:15:f6:86:a1:fb:0d:cf:52:48:38:5d:b0:4b:
8b:87:02:95:bd:66:08:33:bb:46:0b:ca:77:ea:50:80:03:bd:
15:b8:e6:bd:63:47:e7:65:b7:e7:3e:91:3a:f1:be:f7:06:27:
d2:17:49:92:e7:eb:c4:12:76:7a:fc:42:fa:75:36:92:8b:7a:
d5:f1:c2:8e:ef:bc:2f:62:c1:af:72:55:56:0f:36:95:68:de:
2e:b4:d5:9b:14:71:6c:40:a5:6b:32:0a:b3:57:66:d9:94:46:
d6:ed:7d:a4:be:5e:6a:5d:d7:90:e5:9b:26:8f:63:59:ed:c9:
fc:70:6e:79:32:c1:60:8b:d8:99:cf:cb:da:d1:e6:7b:01:a4:
04:fd:65:85:cc:cc:93:38:a3:14:d2:eb:51:a5:45:8d:5c:48:
14:18:8e:1f:b6:4c:46:a9:9e:f1:76:a3:9f:a9:eb:7c:96:48:
bc:01:42:0f:35:fe:00:35:32:2b:cd:a0:18:0e:b7:4e:9c:28:
41:d3:7a:33:51:2b:bf:35:df:7f:62:c6:f8:2e:75:3d:3c:4b:
e3:90:7a:06:15:10:78:f0:55:d4:b4:20:0c:09:12:ae:d5:5c:
b1:aa:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:06 2025 by rpki-client