Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
File: _utSjKSLH0R1gsVMz27XgHUbUdU.mft (raw, json)
Hash identifier: lqKmnP0Mu5c/bmFfdrbW2Anp1i/ft3bu0l1Ulx/Sguc=
Subject key identifier: 1E:44:F9:51:C3:73:36:CC:E1:D0:51:0A:E7:66:23:09:5C:EC:42:E0
Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Certificate issuer: /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Certificate serial: 01993124F3940F1E091C180164261E105A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
Manifest number: 0649
Signing time: Wed 10 Sep 2025 01:02:09 +0000
Manifest this update: Wed 10 Sep 2025 01:02:09 +0000
Manifest next update: Thu 11 Sep 2025 01:02:09 +0000
Files and hashes: 1: B__ce4ujUqEmlGqCFUbQT-ccBdY.roa (hash: 1CKFjTgmzuTlf5nTjDnLD5ljICDqBQT8G+uOkx9bmJQ=)
2: JzV_Sn4tIzXvCFv3Nyu9_wW9lSY.roa (hash: 8RYaQegHEGlbUBPpPODpDM4K/PYoEohyNinnrKZorsk=)
3: _utSjKSLH0R1gsVMz27XgHUbUdU.crl (hash: ryzm3dVfsK0HZv2dzhQQnQzOUvzCNVKwKRSVmAjoJK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:f3:94:0f:1e:09:1c:18:01:64:26:1e:10:5a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Validity
Not Before: Sep 10 01:02:09 2025 GMT
Not After : Sep 11 01:02:09 2025 GMT
Subject: CN=1e44f951c37336cce1d0510ae76623095cec42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:ab:f6:61:8a:b6:c6:22:74:f8:08:03:9e:
fb:f7:f1:ab:88:13:11:3c:7b:b8:99:d9:b3:8a:2c:
13:09:b2:80:ee:4c:a6:39:62:55:97:7e:a2:c2:7c:
bc:32:1b:a1:12:c7:a5:41:63:31:44:f4:d3:89:69:
36:56:5d:bb:d6:e7:21:d1:7b:90:1c:34:2f:b8:f9:
83:1b:a9:0a:06:9d:27:3e:73:a1:e6:08:aa:cd:e0:
05:22:96:b2:54:7b:d9:10:39:3c:f2:c9:ad:61:6a:
8d:cc:1b:96:d8:9f:33:3c:f2:47:1d:b3:92:26:99:
0f:7e:65:7e:55:b1:60:b8:aa:50:08:d4:58:6f:f3:
19:cc:9a:85:63:bc:e0:9f:c5:24:59:31:9c:48:18:
ec:4d:e2:36:93:b5:1e:d4:c7:c4:98:f5:8a:ac:b4:
e9:5d:50:9a:4a:8d:70:3d:2d:49:7c:5d:f5:34:2a:
27:ae:db:5c:7d:a3:02:77:62:2f:fc:12:60:ac:2f:
35:b9:24:d8:cf:22:8a:be:d5:a3:9c:48:40:3a:81:
22:38:7c:f3:a6:71:e1:16:4c:a8:d8:2c:1a:6e:c2:
93:64:66:71:9e:27:04:74:47:05:08:c8:16:13:fa:
c4:d3:81:e1:09:68:bc:e3:c0:72:d7:4c:ea:37:e6:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:F9:51:C3:73:36:CC:E1:D0:51:0A:E7:66:23:09:5C:EC:42:E0
X509v3 Authority Key Identifier:
keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b7:c6:5a:0a:c3:80:99:d0:f3:17:a7:87:76:09:88:16:c6:
c3:09:96:8a:10:67:e8:18:d8:7e:2b:b2:9c:38:5a:78:38:e4:
65:f1:dd:03:29:c6:c5:7a:39:e6:c6:ef:0d:87:77:17:6f:6b:
e5:23:61:9f:2b:8c:82:55:dc:2e:2f:48:11:b4:4f:dd:d9:e1:
2d:76:86:8b:c9:db:33:ac:e6:5d:f6:b1:5f:21:da:50:5f:2c:
7e:c7:62:bd:49:67:70:31:95:09:55:bd:93:64:44:89:7c:e8:
46:10:67:92:ee:33:b9:d1:a1:48:ba:36:35:77:85:2f:a5:2f:
4b:14:1c:97:9f:ab:1a:2a:15:25:9b:ec:22:bc:98:0b:51:9b:
23:3e:c2:aa:2a:f2:3d:ce:51:51:0b:11:45:db:f3:21:05:9b:
a3:b3:c9:93:38:24:e8:b8:c0:3e:e2:a7:29:d8:ec:3c:a9:51:
fe:2a:f1:ca:79:54:72:5b:99:b7:5b:51:81:8a:47:c7:f4:4e:
7e:a7:0f:af:35:c5:11:80:53:33:27:09:31:79:80:7b:f0:cb:
73:a3:45:31:47:2b:aa:b3:2c:c3:42:f8:e7:f7:54:8a:2b:cc:
45:74:b0:91:cd:fd:9b:60:ac:74:99:a1:9a:df:a7:35:a6:d8:
09:a5:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:51:32 2025 by rpki-client