Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier: RuefGEah4HiGd67M3h2jNOyRt18koQoEZwe1TzOaBIM=
Subject key identifier: AB:A7:B0:70:55:5E:DB:A5:4E:90:CE:B6:98:21:82:5E:A7:96:A2:EC
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 019936135419A62C5C0F11F382FE1B1C304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number: 15A3
Signing time: Thu 11 Sep 2025 00:01:00 +0000
Manifest this update: Thu 11 Sep 2025 00:01:00 +0000
Manifest next update: Fri 12 Sep 2025 00:01:00 +0000
Files and hashes: 1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: HElHtxzSx2J7lkHRQO/x5cVhJqLoTb9XBKZW/7727D8=)
2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:54:19:a6:2c:5c:0f:11:f3:82:fe:1b:1c:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Sep 11 00:01:00 2025 GMT
Not After : Sep 12 00:01:00 2025 GMT
Subject: CN=aba7b070555edba54e90ceb69821825ea796a2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:74:bd:af:c6:4a:b0:9b:f6:c8:60:6c:00:
ad:b2:fe:f6:c0:19:42:b2:26:12:18:a0:20:ea:72:
2b:e7:a7:77:f6:a1:3d:05:b2:74:1e:c1:f1:91:15:
ae:57:fc:d9:ce:93:31:50:97:f9:65:31:ff:46:bd:
43:1a:5f:39:26:72:79:a8:55:68:90:a3:de:40:93:
44:9c:24:d9:2a:6a:9e:db:70:ce:dc:9f:f0:06:d4:
7c:7f:b6:81:60:02:1e:3d:71:2a:bb:cc:80:83:9c:
87:8c:0d:bc:dc:a3:a2:b9:1a:34:5f:d7:29:be:d8:
7d:46:01:a4:6b:aa:29:90:b5:cb:c3:c6:33:5b:46:
10:67:b5:89:7c:e3:10:c3:8d:c5:03:0f:b2:12:1a:
08:44:b3:47:d5:37:fc:bd:42:ac:fe:cb:b3:30:b4:
7e:b3:96:45:46:de:2d:89:81:5c:67:2d:67:84:1a:
e4:05:08:d8:4f:f0:52:64:9f:61:db:03:86:52:fc:
73:9f:58:98:65:b7:c0:fd:1d:08:3f:c9:a0:28:35:
73:22:e7:66:ac:e6:27:4f:4d:34:23:df:ef:07:0f:
cc:33:96:da:00:a3:1d:4a:57:df:f2:95:1e:91:1f:
e5:56:57:23:b9:4e:3d:bc:03:9a:79:48:37:a9:7f:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:B0:70:55:5E:DB:A5:4E:90:CE:B6:98:21:82:5E:A7:96:A2:EC
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:db:44:64:42:01:26:a9:01:07:5e:19:03:3b:af:14:ac:
89:a9:3a:98:69:d9:b2:60:4d:3a:bd:83:93:4d:ce:96:f9:2a:
2d:17:30:99:75:6c:bd:f3:48:75:2f:bb:31:77:60:15:25:b1:
33:14:10:94:97:58:d0:85:50:b5:da:35:90:32:2d:0c:01:54:
cf:73:b1:9c:ce:c5:bd:d2:a5:bd:9c:85:cf:55:55:3f:e5:3b:
7a:af:f7:41:4c:16:7c:8a:9d:e8:7c:16:d8:a0:15:f9:04:86:
f7:d0:2f:dc:e3:cc:7f:49:4b:95:f1:f3:f3:bc:23:13:d2:13:
97:23:ca:55:e2:ba:c2:e4:de:c1:f4:24:fc:cd:5b:62:3e:49:
60:c8:0e:d3:e3:92:ea:2d:73:d3:a6:8f:2c:6f:33:3f:44:3e:
cd:07:9b:5c:96:04:6c:2c:61:f7:19:c6:99:f1:03:76:bc:7d:
da:5e:a6:af:b0:3b:e6:67:e6:c4:12:2f:6e:85:49:97:1f:43:
1a:d5:ad:0f:b0:43:9e:f4:39:3c:9f:55:0e:22:83:dc:93:b5:
bc:a5:04:4d:a4:b4:24:3a:ba:42:82:c6:f1:88:bb:82:f8:57:
95:47:54:53:80:2c:8a:45:29:c6:fc:0c:5a:ce:75:d3:7b:f4:
39:45:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:31:34 2025 by rpki-client