Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: eiokoUnB2LI7lwI9GEWzOm5R9vYHxNI6BJrf4SS5G38=
Subject key identifier: 03:F9:7D:84:24:4E:5B:AC:D4:8C:28:98:A7:32:FA:CE:3E:55:86:17
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019921B231C5352393E245A3330A87FF39D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:02:30 +0000
Manifest this update: Sun 07 Sep 2025 01:02:30 +0000
Manifest next update: Mon 08 Sep 2025 01:02:30 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: 9Li0JmdooZo+megIy9cIxdNMqS86Zw39n+YTUorvTcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:31:c5:35:23:93:e2:45:a3:33:0a:87:ff:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Sep 7 01:02:30 2025 GMT
Not After : Sep 8 01:02:30 2025 GMT
Subject: CN=03f97d84244e5bacd48c2898a732face3e558617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:3a:99:b0:d3:13:b1:ab:63:14:5b:3f:76:
6f:2a:de:6c:86:35:db:4d:2d:49:d6:a5:fe:e5:ab:
f1:a6:58:5e:ac:2f:bf:e3:cc:9c:85:16:ab:7e:ec:
98:d8:72:06:d5:aa:36:de:16:18:ec:e9:8b:a6:7a:
ae:b6:8e:3c:0b:41:b7:3f:75:68:43:f0:8b:9e:27:
bc:19:60:2c:a8:8d:b5:fc:25:02:79:26:db:9a:7c:
71:73:07:b3:86:1e:1c:5f:76:3d:5e:3e:43:4e:bd:
60:fe:65:61:21:1b:ef:fd:de:7c:d8:6e:fc:c5:00:
75:75:0c:0e:39:0a:cc:0f:63:8b:fc:66:1c:da:d1:
9c:e2:b1:e4:0e:86:fb:f2:3c:c6:3e:ef:d2:a9:2f:
84:f7:d9:f8:28:77:05:92:e1:12:0a:48:4b:8d:2b:
e4:eb:68:ab:4a:8d:d2:93:4d:9d:75:0b:13:da:0b:
0c:4b:26:86:e8:a7:8a:52:8f:a9:3c:9e:a3:e0:54:
1d:44:e5:be:02:92:50:d4:7e:da:2b:a8:cf:32:00:
1d:2d:23:4c:49:18:2b:9b:93:07:da:5a:c6:17:15:
76:f2:1e:df:d0:aa:53:4a:05:37:80:59:39:d3:b7:
54:f5:0f:5d:f4:f6:5c:8e:d1:ab:85:c3:11:16:b6:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:7D:84:24:4E:5B:AC:D4:8C:28:98:A7:32:FA:CE:3E:55:86:17
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:84:df:25:ae:de:63:8a:95:94:6c:4a:cd:77:29:c1:1b:
4d:3b:46:dc:ab:69:c8:54:84:5a:e7:88:44:78:b6:0e:79:b9:
f5:30:9b:1e:cd:a3:71:5d:6f:04:bd:53:45:2d:c0:5b:de:ac:
d1:8f:11:5d:67:85:b5:1a:86:71:3d:64:26:44:7b:30:76:6b:
1c:a1:fb:fb:58:c7:2b:ba:31:c9:15:9a:74:0e:5f:0c:8f:aa:
ea:23:5f:c1:1d:0b:57:92:89:02:56:c8:c8:84:c5:68:40:9d:
e4:1a:75:17:c4:de:d7:fa:00:67:25:b5:4e:80:70:d9:09:ac:
cf:72:00:69:c1:c1:1f:ff:86:34:c8:30:4b:c7:fd:10:5e:ff:
c4:42:e3:70:0a:75:f0:0b:07:cb:ba:08:07:aa:f1:e3:82:e6:
0a:09:73:f3:81:70:e9:61:12:30:cc:3b:d8:99:5e:cd:25:cf:
4e:85:ce:85:b1:24:ea:25:f1:ce:bf:71:c5:63:7c:77:b5:a6:
31:65:df:96:bc:92:64:2d:e7:c5:ce:9e:d6:19:c1:66:13:9e:
65:d8:b6:73:7c:38:ec:35:85:2c:a7:c6:32:05:3d:f7:0f:c7:
32:ad:78:26:1b:db:c7:6b:d6:4c:06:c4:64:e9:c8:b9:17:e1:
8f:46:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client