Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: 6gzfYh8gPjQnoi1EiNgPblAzvbJ49O7crdZk4R9hHhA=
Subject key identifier: 91:6A:E4:9F:95:3E:BA:80:E8:92:AE:9D:C0:BC:EC:0B:78:8C:09:EC
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 0199161A685421C07407E8FA604638F1FFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 1618
Signing time: Thu 04 Sep 2025 19:00:53 +0000
Manifest this update: Thu 04 Sep 2025 19:00:53 +0000
Manifest next update: Fri 05 Sep 2025 19:00:53 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: t0RbgLHO23+8XF1RpDv3yoRXo6ThSE8D4JpbbBjnwKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:68:54:21:c0:74:07:e8:fa:60:46:38:f1:ff:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Sep 4 19:00:53 2025 GMT
Not After : Sep 5 19:00:53 2025 GMT
Subject: CN=916ae49f953eba80e892ae9dc0bcec0b788c09ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:4a:da:3c:84:09:90:71:fe:4f:11:b5:74:
fd:ca:28:16:be:2f:ea:99:1d:e8:a6:4f:1c:d7:81:
18:a8:66:35:2b:d8:46:7e:3c:9a:43:7d:52:49:09:
80:76:32:91:84:94:e7:0b:0a:c9:bb:d5:d7:a8:a7:
b5:00:ac:9d:4a:e1:8a:22:df:b0:86:66:34:25:be:
6b:bd:5a:b5:81:52:2e:bf:21:86:4a:8a:4e:05:d4:
fd:a2:6d:b4:b3:5f:bd:86:3c:5d:f2:06:e9:4c:2b:
c8:9b:32:bf:89:ae:fa:af:3a:31:f0:f5:59:b2:5b:
db:d3:54:c5:a4:e9:b6:17:62:fb:c3:69:f2:70:4f:
93:7a:39:03:d6:be:5f:ed:8e:6f:7a:e0:12:48:6e:
9b:1b:a6:6e:a5:75:22:2f:91:80:3a:fe:7f:05:57:
6f:d5:3b:f3:a2:01:28:92:95:21:b2:ba:33:d5:50:
36:78:93:47:a5:2a:31:b1:31:a5:60:73:c1:43:e3:
29:12:b4:95:9f:a0:0e:7b:3f:0f:ef:db:79:77:c6:
08:fa:bb:25:a7:b7:80:96:11:df:29:28:33:5c:7c:
ed:e4:13:72:31:67:0a:59:6a:a6:52:9e:a9:bb:54:
a6:07:2f:35:70:8c:5a:b5:2b:06:69:27:d7:a1:b8:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:E4:9F:95:3E:BA:80:E8:92:AE:9D:C0:BC:EC:0B:78:8C:09:EC
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:04:88:77:2c:21:19:32:cc:4e:f9:e6:0e:67:f4:8e:af:
17:5f:f2:e6:7a:69:f2:5b:02:98:f8:74:1b:42:56:28:18:dd:
ce:6d:a7:6e:97:59:34:10:0a:93:a0:d9:ac:27:08:ba:85:25:
df:47:b2:54:ef:9e:43:0e:fa:c5:fe:74:17:e8:54:c2:e1:4d:
65:8a:5f:71:c4:0b:5f:25:ff:a0:78:8c:13:08:eb:50:e6:a1:
57:79:27:25:0a:16:8c:5d:e6:5d:40:6c:3c:75:6d:a2:1f:1d:
07:5d:ab:ab:cb:f2:a4:05:14:fd:28:d1:b9:3a:fd:72:df:63:
3b:15:bb:a8:e0:e8:d7:c0:e3:91:51:ea:ef:a0:1d:3a:ed:08:
85:64:17:bb:8a:c3:b8:81:4f:1e:d9:d0:a5:50:32:d7:8c:02:
55:e7:d3:d1:9d:6f:3d:89:c0:a3:b1:0d:65:46:21:a2:bc:61:
77:77:66:eb:de:24:f9:31:4b:61:cb:ec:77:ad:ce:ea:f0:05:
0f:d6:3b:11:d2:a3:d2:d9:16:2f:45:8c:7b:ae:65:c4:f4:2a:
1a:7a:75:3f:83:5c:b5:59:6a:de:6a:b3:5a:b7:7f:63:ff:28:
bd:ef:8a:ee:db:55:8b:c3:56:d7:9d:a1:cf:ec:bd:dd:fe:5f:
72:05:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client