Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: U2mjBOQ0DzDUTo4reeY7qe3c+qJq1fp0KuDa4/fejvg=
Subject key identifier: E5:20:96:0E:2B:05:4C:73:06:A7:EA:44:8C:CE:12:5F:08:45:5F:4D
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 01995F0EE98E23B58BF7709ADB74129C297C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1691
Signing time: Thu 18 Sep 2025 23:00:36 +0000
Manifest this update: Thu 18 Sep 2025 23:00:36 +0000
Manifest next update: Fri 19 Sep 2025 23:00:36 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: XlsjuMvPs5VpabSL8sHNXrGZpgb3i8Hkj8dUpoyv7h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:0e:e9:8e:23:b5:8b:f7:70:9a:db:74:12:9c:29:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Sep 18 23:00:36 2025 GMT
Not After : Sep 19 23:00:36 2025 GMT
Subject: CN=e520960e2b054c7306a7ea448cce125f08455f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:79:d6:a1:38:0d:e7:f2:31:c5:6b:96:b0:
cc:cd:87:c3:ac:6d:ad:da:95:7e:db:96:27:7f:9d:
27:34:9b:06:e4:63:15:4b:36:7b:aa:76:7b:46:f2:
ec:9a:99:7e:5b:ab:53:1f:4d:b0:ab:89:25:94:60:
b5:df:c7:33:aa:f2:1f:80:72:aa:36:06:de:bd:73:
08:c1:16:1a:45:d9:9e:67:32:77:dc:96:b6:e2:5a:
6e:21:8b:dd:38:b4:0b:f6:3c:70:92:3e:61:76:cd:
e4:4f:1e:52:e6:e9:02:f5:59:d1:9a:81:35:84:8f:
bc:97:6b:e5:7e:9b:72:02:97:77:ea:43:7c:23:1e:
ad:81:a5:a9:ff:e4:a9:ca:2f:17:c7:54:9b:49:8d:
66:28:6d:49:97:e7:32:f9:67:f2:69:8a:59:a5:cf:
61:e8:4d:e4:3f:65:eb:6e:ed:00:3b:06:f2:be:31:
dd:71:37:31:f3:e9:5f:be:45:ad:16:d4:78:71:25:
ee:61:ac:61:f1:77:ae:2b:a0:6d:15:e9:44:e3:71:
e8:40:32:d5:81:57:e1:2b:3b:b0:df:65:23:14:d4:
8f:9e:92:91:5b:19:b5:4a:31:78:0f:0f:2d:25:5a:
f8:98:fc:90:6b:6a:93:91:57:df:9d:12:52:6c:47:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:96:0E:2B:05:4C:73:06:A7:EA:44:8C:CE:12:5F:08:45:5F:4D
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e6:8f:58:5f:25:2f:f0:76:5f:3e:a0:20:c2:ac:f8:93:d9:
18:61:2f:e7:d5:91:51:d4:e2:23:a9:ab:b1:06:87:37:c3:46:
65:96:f6:68:25:0e:c5:31:9d:aa:f6:54:46:70:ee:5a:1e:6f:
b3:52:6f:2f:34:18:ff:91:b3:86:69:84:58:44:84:d9:61:53:
75:e2:d9:a5:e6:3a:56:11:b3:1c:00:95:47:db:2b:95:75:24:
06:c0:7a:0b:4f:f2:33:81:51:c1:0a:a2:ca:c3:7b:0e:64:9e:
80:4f:cf:fe:7b:67:7a:ae:fc:e9:2e:b3:29:cf:20:46:bb:dc:
17:6c:f4:90:8a:8d:57:f9:e2:6a:d1:aa:fb:f9:fe:2a:4e:c4:
e7:c0:fe:e1:d4:59:c0:09:5c:c6:b8:cd:f6:b5:cf:3a:ae:19:
db:f8:17:4e:3f:2d:73:e4:38:aa:5d:0d:c6:b2:7d:13:17:66:
ba:c1:60:3f:dd:68:9c:0b:47:64:9f:67:56:79:11:c1:9f:72:
97:bd:11:74:a9:9e:0a:7a:bf:08:23:33:a8:3f:69:08:3d:99:
1f:bc:4d:fa:62:79:6a:6d:61:38:fd:8c:ff:c9:71:54:50:a9:
ea:a2:8a:82:7e:57:8d:af:8a:93:b0:61:93:a9:01:e7:03:19:
9c:6f:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:59:51 2025 by rpki-client