Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: oizusVcHvGnIr00+xeJQIvdMGe4qByU1m6Db3ZSj9rk=
Subject key identifier: 20:07:0C:74:4D:41:F6:A8:71:94:04:7A:FF:02:3A:24:ED:DB:32:18
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 019921E74BE49120E2600350A709FC502D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0F75
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: XLRMuSNOdKHjJ1xbmi2hqS8ljz2GlijJzIfxLF3y35M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4b:e4:91:20:e2:60:03:50:a7:09:fc:50:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=20070c744d41f6a87194047aff023a24eddb3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:08:54:66:9e:14:61:55:1c:91:e2:e8:ac:
c8:e4:1b:95:5f:ab:f0:e1:4c:f7:fc:d0:2c:c6:91:
2a:17:3a:ad:3a:49:04:a7:d9:b9:56:f3:3c:69:5a:
f1:b3:70:68:0c:5d:99:6b:6f:6e:3d:6a:d3:f5:5a:
c3:f9:66:40:29:75:a6:fb:a2:50:33:46:a2:8e:60:
e6:47:9b:4e:1b:ec:91:ac:83:f5:ac:f2:4e:12:00:
06:c1:df:ac:13:9c:87:0a:ac:62:1a:f2:80:d1:5b:
42:b5:5e:1b:c7:27:f9:9c:48:5d:de:2d:62:c3:0a:
cc:11:da:36:6d:df:88:84:7e:3b:95:09:03:02:81:
87:31:b0:11:2e:5e:5b:1a:86:fc:7f:96:6b:56:54:
ce:88:fb:16:ac:18:74:2d:3a:51:28:87:a3:05:7a:
2c:7e:d3:e4:a9:f0:19:3d:d3:fe:61:34:5d:34:52:
bc:5b:60:da:c7:a7:d0:46:da:55:d3:92:29:66:33:
84:ed:3c:af:12:3e:05:9e:f0:c7:67:b8:77:aa:70:
d7:37:43:2a:c1:21:e7:e0:37:33:fb:59:19:29:fa:
54:d0:6a:8d:3e:28:c3:3b:d1:19:23:d4:bb:b0:a0:
69:49:dc:53:5c:b8:d3:61:f6:5a:63:e8:9c:6b:bd:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:0C:74:4D:41:F6:A8:71:94:04:7A:FF:02:3A:24:ED:DB:32:18
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:b8:0c:06:ae:8a:4a:94:f2:de:bf:c2:a3:09:30:50:35:
bd:00:2a:6e:c1:af:ee:d2:e0:ac:6c:b0:2c:e1:72:06:73:78:
19:a5:7c:ad:94:93:e0:0e:60:9c:a4:30:3a:75:ca:1f:fd:ee:
88:30:8a:41:ce:03:6f:6a:69:1d:d8:f7:23:96:9b:57:5e:79:
31:13:47:4c:67:2d:ec:b5:2f:e2:e3:f4:cc:1d:aa:bc:67:ae:
fc:d6:12:1b:8e:c2:8c:9b:74:87:ac:2c:af:42:9f:6a:2c:2b:
cd:4c:4b:0b:e5:d2:f1:d3:98:82:58:9c:c7:1f:09:e5:a7:af:
70:89:86:84:17:c9:a2:db:a8:d8:3d:49:10:c1:fc:2f:c9:3c:
b4:45:d6:76:6e:ca:20:0e:ea:80:ae:95:bb:c9:a7:3a:2c:93:
0a:53:3e:78:af:f9:3c:ae:f5:94:9b:1c:73:fa:20:1b:d6:9a:
aa:cc:ab:b9:11:bb:1d:6b:cb:65:68:d6:c3:8f:0c:5e:37:97:
60:fb:e8:65:a2:7b:47:ec:7f:ac:bb:d9:a8:ed:a2:72:ff:9b:
7d:75:3c:fc:42:4f:8d:68:07:b3:9f:bc:3f:64:65:63:54:95:
32:22:46:a6:e7:04:7d:ac:90:58:8f:c4:5e:d8:e3:d6:d6:0c:
20:e5:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:59 2025 by rpki-client