Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier: QBotflhYUYguUKBu2egGF8N7KA6Q94jZFckywigDvBM=
Subject key identifier: E7:3D:7F:DF:43:02:95:8D:9D:A5:56:DE:F9:8C:40:6A:83:AF:91:5D
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 01992E5A1DBA41C1BEFA04B246AB41C1E300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number: 167E
Signing time: Tue 09 Sep 2025 12:01:21 +0000
Manifest this update: Tue 09 Sep 2025 12:01:21 +0000
Manifest next update: Wed 10 Sep 2025 12:01:21 +0000
Files and hashes: 1: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (hash: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=)
2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: m8d2uc1NTxanaiKXVlxXXFGNEJgOKbZKux93iycHnVI=)
3: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (hash: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=)
4: mpgyXJ7iE41eH88IcrenXFUA9NI.roa (hash: wZqBDQ4cwcpcocBr4dj1IjCT+ao6cHj31fYRn+uOxj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:1d:ba:41:c1:be:fa:04:b2:46:ab:41:c1:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Sep 9 12:01:21 2025 GMT
Not After : Sep 10 12:01:21 2025 GMT
Subject: CN=e73d7fdf4302958d9da556def98c406a83af915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:e3:80:ed:6a:11:2f:cd:d4:52:1a:6d:85:
d5:68:56:c5:47:48:79:75:af:f0:5f:e3:66:79:a0:
19:4e:ba:dc:ed:74:12:72:06:20:ff:22:3c:e7:1e:
be:f3:58:a3:84:7e:46:7b:fa:2a:06:a7:87:60:99:
f0:6d:f2:38:b0:99:88:17:ad:57:db:ec:df:51:c3:
e5:dd:e8:0d:7c:b8:1f:7a:8c:ce:2b:03:ee:cf:8d:
be:c4:2a:a9:1f:af:42:db:ea:71:d9:2a:c2:84:6f:
82:76:6b:49:0f:a7:64:35:eb:5b:d6:8b:4c:ea:b1:
5c:40:bb:a3:1a:c8:e1:90:54:d3:dc:f8:93:e0:51:
9d:0c:82:b9:5e:12:4b:b4:4b:ae:fa:e8:29:ed:00:
96:a6:d5:99:6e:67:1c:40:0b:38:11:25:8e:e3:7d:
69:e9:2c:f2:bf:35:00:97:44:dc:14:aa:95:d8:39:
3f:f4:21:4b:55:6b:ae:42:5b:9c:d3:ef:f1:44:78:
4a:c6:0c:34:10:17:79:41:88:7f:f1:eb:5c:e0:5c:
12:ba:dd:21:96:f5:a8:53:65:d6:03:2a:52:d2:d9:
50:a4:76:0a:14:6d:e6:c9:6c:71:71:23:7e:99:e1:
62:59:57:ae:71:84:d9:4e:a9:0d:c2:f1:e9:9f:5d:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:7F:DF:43:02:95:8D:9D:A5:56:DE:F9:8C:40:6A:83:AF:91:5D
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:97:cf:70:4b:a1:05:ba:d5:54:4f:7a:c7:b4:1a:e1:f4:b4:
72:94:f3:14:70:6e:9c:ef:1f:f6:fd:79:85:08:6a:da:dd:ac:
a2:ad:80:7e:17:9c:90:ce:9f:cb:82:1f:bd:fc:a1:32:56:d5:
2f:d9:c6:0f:26:af:84:32:b5:63:99:2a:5f:73:5b:78:62:0b:
1a:4e:15:61:6f:c9:81:58:91:33:a4:2c:29:5b:e1:51:e8:91:
f4:82:44:8c:f8:51:0a:42:d1:7e:98:e0:83:d1:16:60:c3:ba:
a1:b1:f6:ff:90:91:2c:20:b3:88:ba:ed:bf:be:cc:52:8d:f3:
1e:b0:df:b7:15:31:c9:89:c7:d8:fa:52:f8:43:4a:e2:dd:e0:
aa:88:7c:e0:f7:27:ca:6c:42:25:ec:75:3a:84:b1:28:d2:3d:
70:40:93:19:0d:c5:60:7e:c2:59:8a:d8:80:cd:0e:01:93:f2:
da:99:80:de:a0:b3:4c:68:89:c4:6e:7e:f1:b5:76:1e:82:ce:
fc:54:05:09:3d:fa:db:e9:da:a5:90:62:a8:1c:2c:54:25:8e:
ff:76:8a:55:95:66:2b:50:aa:73:ac:ae:40:c8:8e:88:b7:93:
2d:fa:d4:29:62:2d:d2:2d:a4:d5:b1:98:f6:04:66:1a:26:2d:
7c:bc:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:13:27 2025 by rpki-client