Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: /7L1kjHZFgW/TqdfwmbV7kRHBhEU6Wghhj3tIr2qErA=
Subject key identifier: FD:86:9A:C2:D4:3C:B1:CA:C9:C4:D2:CA:D1:8F:78:A4:D2:2C:37:40
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019923D6286E73BE3C824137673BBC231B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 08B7
Signing time: Sun 07 Sep 2025 11:01:01 +0000
Manifest this update: Sun 07 Sep 2025 11:01:01 +0000
Manifest next update: Mon 08 Sep 2025 11:01:01 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: OSsxAwXsQSh69E0bsae+PlkK2i18HWLb9jsuXgfB+Jk=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:28:6e:73:be:3c:82:41:37:67:3b:bc:23:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Sep 7 11:01:01 2025 GMT
Not After : Sep 8 11:01:01 2025 GMT
Subject: CN=fd869ac2d43cb1cac9c4d2cad18f78a4d22c3740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:06:ef:88:01:e2:1a:5f:e5:72:73:f8:95:
67:8e:d3:9b:83:73:9e:92:60:dc:6a:6c:56:12:33:
50:c8:ab:1d:1b:08:70:bf:fc:f1:e6:a2:66:ba:30:
ae:71:89:5d:05:eb:f4:85:5d:f9:26:c8:4b:3b:7c:
ee:41:04:ae:88:bc:63:85:0e:17:92:92:f0:62:29:
03:a7:5f:1b:68:1e:47:0b:b8:ea:ea:df:20:3c:c8:
2f:43:78:f7:4b:07:68:84:0d:68:8c:55:ed:78:16:
93:bf:1e:01:c2:e4:13:d6:60:58:7f:77:bb:14:9d:
1a:41:8e:a6:1d:fc:5a:0f:f2:d8:6c:f5:89:5f:75:
e9:5c:fa:97:5d:c4:f7:f4:19:8b:ab:46:17:dc:00:
b0:ea:12:73:96:f5:5a:fb:63:78:4d:6d:8a:b0:56:
e2:a6:30:cf:3a:34:ef:0e:76:88:4d:7f:6c:ab:c0:
fc:ca:9f:2b:7a:14:ef:b4:07:0a:c2:17:e1:17:b8:
37:17:73:58:91:27:5f:c1:0c:12:0c:aa:64:b2:3d:
bc:86:31:66:78:b9:09:f4:75:bd:4f:4d:f5:51:a2:
1e:18:5c:02:95:e3:c8:cc:a1:de:aa:73:6e:02:6b:
02:ab:22:02:14:7d:80:98:a1:c8:aa:4c:3e:f1:fe:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:9A:C2:D4:3C:B1:CA:C9:C4:D2:CA:D1:8F:78:A4:D2:2C:37:40
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:27:ba:32:9b:d7:8b:2e:b8:af:1e:f0:7b:2b:5b:2e:87:0f:
ba:c7:b9:67:6f:d4:b3:0a:3e:ff:33:08:93:ed:86:50:69:ae:
eb:b2:60:65:8b:e1:f2:c6:c9:a4:ba:ce:c9:34:f1:31:c7:83:
e1:c6:a9:d9:c5:04:fe:87:cb:e3:d8:ce:be:d6:d3:61:7b:d6:
27:7d:63:0c:73:35:ad:30:28:69:8d:57:4c:c4:5a:f2:7b:bd:
d2:04:1f:cb:f3:ae:04:68:7c:0a:6e:d0:97:13:c8:92:08:0a:
24:c8:a2:cd:39:80:43:a7:3f:d4:1b:f3:e1:ed:3b:dd:a8:c2:
76:2b:88:9a:6f:4e:95:1d:23:54:b5:25:dc:81:28:ed:65:d9:
cc:e2:00:c6:b5:07:a2:8e:d1:8b:61:3c:4a:76:7d:c0:72:58:
c4:cd:ac:2f:19:59:09:11:fb:5f:6d:ad:c3:72:84:5d:74:94:
67:8c:23:65:c5:18:29:b4:97:9f:a7:ed:f2:ab:4e:63:40:d5:
3a:b8:23:27:a9:bb:04:e2:72:46:25:9e:4a:64:03:77:c9:ff:
5f:38:5c:cc:6f:4f:a3:7e:03:f1:bd:1d:a7:13:06:a0:2d:43:
72:c1:46:10:75:01:80:1e:f6:bb:f0:e1:d7:ec:19:fc:c5:5c:
fd:11:c3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1ihuc748gkE3Zzu8IxsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjUwOTA3MTEwMTAxWhcNMjUwOTA4MTEwMTAxWjAzMTEwLwYDVQQD
EyhmZDg2OWFjMmQ0M2NiMWNhYzljNGQyY2FkMThmNzhhNGQyMmMzNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra0G74gB4hpf5XJz+JVnjtObg3Oe
kmDcamxWEjNQyKsdGwhwv/zx5qJmujCucYldBev0hV35JshLO3zuQQSuiLxjhQ4X
kpLwYikDp18baB5HC7jq6t8gPMgvQ3j3SwdohA1ojFXteBaTvx4BwuQT1mBYf3e7
FJ0aQY6mHfxaD/LYbPWJX3XpXPqXXcT39BmLq0YX3ACw6hJzlvVa+2N4TW2KsFbi
pjDPOjTvDnaITX9sq8D8yp8rehTvtAcKwhfhF7g3F3NYkSdfwQwSDKpksj28hjFm
eLkJ9HW9T031UaIeGFwClePIzKHeqnNuAmsCqyICFH2AmKHIqkw+8f4oowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2GmsLUPLHKycTSytGPeKTSLDdAMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABye6MpvX
iy64rx7weytbLocPuse5Z2/Uswo+/zMIk+2GUGmu67JgZYvh8sbJpLrOyTTxMceD
4cap2cUE/ofL49jOvtbTYXvWJ31jDHM1rTAoaY1XTMRa8nu90gQfy/OuBGh8Cm7Q
lxPIkggKJMiizTmAQ6c/1Bvz4e073ajCdiuImm9OlR0jVLUl3IEo7WXZzOIAxrUH
oo7Ri2E8SnZ9wHJYxM2sLxlZCRH7X22tw3KEXXSUZ4wjZcUYKbSXn6ft8qtOY0DV
OrgjJ6m7BOJyRiWeSmQDd8n/XzhczG9Po34D8b0dpxMGoC1DcsFGEHUBgB72u/Dh
1+wZ/MVc/RHDcA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:54:40 2025 by rpki-client