Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: TY4n3BcPddx6OyQbe/HSU2qMIwuIOF/dKonnBLGNsE8=
Subject key identifier: 3F:77:2E:A6:D4:31:30:31:7B:A4:D8:33:89:3A:5B:F2:90:79:36:4C
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019922FA74603C475D2FB714716264CCD109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0D97
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: jZcZpiTw7W9LHb72VNA9vxFrdmdLgzUOMvVRXTrVvQA=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:74:60:3c:47:5d:2f:b7:14:71:62:64:cc:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=3f772ea6d43130317ba4d833893a5bf29079364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:4e:6f:30:80:99:f3:f0:66:6d:02:ca:ca:
c6:33:03:16:b3:a4:07:78:ef:c0:2c:9e:26:26:a4:
c1:4d:b8:89:56:9f:cb:56:fb:c2:58:33:a4:9c:e1:
f2:6f:2b:e3:13:4c:8d:b0:5e:42:57:87:ca:73:6c:
76:9b:a7:1d:e6:92:1e:ff:01:c5:74:02:8f:4f:ee:
f2:ba:3c:30:06:23:92:07:e0:42:87:dc:6b:b1:8e:
63:fc:bd:48:d2:82:cb:c7:2e:4e:64:70:4e:3e:6c:
4c:d0:8e:d5:45:d4:f8:cc:3d:ca:bc:68:c2:55:a3:
97:f6:13:cb:e0:89:35:eb:43:8b:14:6e:eb:66:e3:
0c:f8:38:83:f0:99:f2:02:f1:2a:d8:32:5d:0e:55:
c2:5a:01:71:04:01:08:5d:53:88:42:cb:ea:c9:60:
80:06:13:9a:81:64:0b:43:ea:bd:b9:a2:e8:f8:31:
d1:6f:06:7b:4d:56:13:f6:06:30:91:f4:f3:d5:56:
3b:08:28:33:38:3c:ca:c5:9e:71:32:3f:50:5d:51:
41:ce:32:cb:81:99:23:1f:9c:e1:7e:cb:cb:9e:64:
62:66:84:9b:a4:32:9a:ed:01:46:85:15:17:eb:87:
9d:f8:41:44:bd:bb:a7:f1:87:28:6f:44:8f:3a:f4:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:2E:A6:D4:31:30:31:7B:A4:D8:33:89:3A:5B:F2:90:79:36:4C
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:0f:15:7c:7d:49:5d:37:7d:e6:d7:4f:97:22:f1:cc:b2:
74:99:09:6c:44:7e:92:e7:f8:1a:2b:5c:a2:e4:9b:b6:08:98:
2a:d2:f5:9e:64:da:cc:ed:88:6b:8c:e0:28:88:65:84:ae:06:
83:b1:54:ff:2b:66:b8:c9:ed:d8:c4:77:86:d6:99:32:50:97:
97:39:f7:7d:66:7b:dd:39:2a:09:13:fd:1a:53:98:c5:9f:bd:
5d:9e:ad:52:34:3e:fb:a6:95:a3:4d:85:3f:2f:13:6d:7f:4d:
80:7e:36:fc:c4:29:f1:26:d4:6b:b1:50:19:54:b3:91:21:7f:
f0:3c:f6:0e:ce:b3:1c:ee:0c:7c:ac:a1:8a:90:c0:2a:05:e8:
f2:46:b9:a3:99:a0:0e:63:31:ac:be:7e:21:86:78:f2:d6:2c:
e7:3f:f2:80:96:09:dc:7a:2b:2e:43:ec:da:a5:6f:dd:ec:4b:
d2:ec:0e:48:f6:c0:34:4c:c3:bd:fe:46:36:6c:d9:78:2c:22:
df:45:a1:02:a0:6c:9c:93:be:5d:49:e9:3c:79:a4:b0:a7:1c:
1f:54:f6:3b:cf:a5:5e:b2:96:46:be:40:c8:ad:ec:db:28:b8:
53:5d:e6:d4:22:75:6d:57:99:ad:25:0b:e5:ce:f3:f6:dd:4f:
28:ca:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client