Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: 32m2vbotU46dY5UrfoIfvbDv6X4z+Dz+EKuCd0XnBto=
Subject key identifier: DC:43:18:11:E8:C3:66:AD:D8:F0:85:86:70:D6:BF:DE:6B:66:89:56
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 0199326D12773B1AB268DBB34A68F5EFB205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 1689
Signing time: Wed 10 Sep 2025 07:00:32 +0000
Manifest this update: Wed 10 Sep 2025 07:00:32 +0000
Manifest next update: Thu 11 Sep 2025 07:00:32 +0000
Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=)
2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: Nurb6TzHwOYbfrWMw9oqtPYbmtjiVI1pbPquPutvhi4=)
4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=)
5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:12:77:3b:1a:b2:68:db:b3:4a:68:f5:ef:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Sep 10 07:00:32 2025 GMT
Not After : Sep 11 07:00:32 2025 GMT
Subject: CN=dc431811e8c366add8f0858670d6bfde6b668956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:ee:fb:72:18:8f:94:76:5e:e3:be:c8:b0:
87:88:aa:85:28:34:c9:42:fe:a6:ca:7f:e0:0a:5b:
fc:ef:a3:a1:09:28:6a:29:39:03:4b:ec:a4:fb:0e:
53:f2:6d:e9:89:44:03:1a:ca:7d:24:61:09:cb:f6:
7b:04:5d:14:c9:06:c8:15:a5:9b:ac:f1:74:42:c5:
7d:b3:33:1e:9a:9c:b6:af:7f:2e:d1:82:f7:32:34:
e2:4b:02:6c:a5:d0:42:b7:25:2e:d7:47:ef:ff:aa:
4d:7c:9c:d6:4c:d8:db:ec:b6:f8:a7:80:00:71:28:
f0:9b:25:1d:59:cf:17:5b:57:55:c3:22:65:03:7e:
f1:0b:f2:36:9b:49:d7:5a:20:bb:79:92:90:80:3a:
70:56:f3:18:12:71:cf:9a:bc:43:38:44:2c:c2:81:
89:60:32:ed:1a:5b:82:76:64:79:cc:46:72:97:4d:
98:5f:95:cd:28:21:f1:62:5b:8b:d0:d6:d7:45:b1:
0a:1e:21:50:cd:f4:55:d8:08:45:c3:b3:23:49:d5:
55:8c:6b:98:6d:eb:39:bb:1e:a2:96:0b:04:35:0b:
2a:3b:86:de:2c:29:b2:1c:a3:d1:62:3d:5b:b7:26:
fa:36:96:14:51:fc:a1:3b:b0:ac:ec:02:11:51:28:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:18:11:E8:C3:66:AD:D8:F0:85:86:70:D6:BF:DE:6B:66:89:56
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:aa:bd:cf:23:d0:56:0a:6e:6c:7d:09:44:17:12:13:58:
d9:27:8f:3e:f8:15:e9:22:16:21:a3:82:31:c7:22:79:17:24:
60:14:e0:dc:57:5d:41:c1:98:cb:5a:2d:0f:59:ee:d4:94:80:
cb:7e:d4:d7:2b:c9:38:11:ab:eb:d9:d6:7c:82:82:7a:39:19:
f3:24:61:84:da:e9:d6:ff:07:7c:ae:b1:e6:8d:75:38:0c:32:
b5:16:81:32:ca:ee:d9:69:db:89:7a:fa:d9:73:e6:5f:e9:25:
aa:36:3b:b4:69:8b:16:98:d6:71:61:11:7b:83:2a:29:44:a6:
d8:f9:e0:cf:f2:8b:15:59:c7:5e:36:f5:42:bf:0d:f5:16:4f:
8e:ee:3a:66:9e:18:06:62:09:dc:fc:0a:78:a9:59:cf:a2:cb:
0b:0e:2f:77:ba:05:54:0c:bf:21:c6:d8:ee:16:36:79:f4:17:
a1:b7:86:d4:17:f3:f9:e8:1d:9f:54:8c:91:16:44:b3:ca:db:
37:82:ff:36:51:f0:d3:9f:fa:2b:93:d4:b7:4a:6b:25:9d:6b:
45:d4:a7:d1:03:71:ea:e2:43:20:b5:88:ab:56:8d:f1:23:89:
5c:6c:ac:f3:f6:05:6d:cb:b0:ea:dd:fe:9d:22:49:76:19:0e:
a6:9b:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:54:01 2025 by rpki-client