Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File: UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier: kFzT99Ch9MVImAej7Wd5XmF8TEdFV2B/AZDS3pbnB2s=
Subject key identifier: BD:5E:71:BF:CF:D9:9C:0F:77:D2:23:74:38:B4:0A:85:F9:8B:F2:E8
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial: 01992F6C6929E300560613750849269FCC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number: 0FC8
Signing time: Tue 09 Sep 2025 17:00:57 +0000
Manifest this update: Tue 09 Sep 2025 17:00:57 +0000
Manifest next update: Wed 10 Sep 2025 17:00:57 +0000
Files and hashes: 1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: B/C3NT+h+olY3HLB2GaFTEh1TdhHOHt/yfqLfCT84ss=)
2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:69:29:e3:00:56:06:13:75:08:49:26:9f:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Validity
Not Before: Sep 9 17:00:57 2025 GMT
Not After : Sep 10 17:00:57 2025 GMT
Subject: CN=bd5e71bfcfd99c0f77d2237438b40a85f98bf2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:0f:ca:d3:ce:7c:63:8d:f9:ae:1f:64:9b:
5e:a8:11:44:a2:57:7e:fd:d1:69:e6:4b:55:26:87:
7c:c9:71:7e:c5:02:ee:e1:77:d3:81:51:f8:e5:4d:
df:00:bc:91:94:39:9e:08:c1:22:e3:cc:37:36:10:
17:1f:67:3d:f7:90:5f:64:13:fb:fd:99:54:79:ef:
03:20:eb:7c:9d:8d:b2:4e:4e:20:61:0f:87:0c:a5:
5e:94:68:9c:ec:03:54:ee:a5:64:bb:0a:59:c2:06:
0b:86:b4:b7:c6:1b:b3:fd:d5:d2:9f:70:b4:c6:a4:
b4:0d:a7:9a:68:15:34:be:76:6f:ed:7d:d1:90:d2:
d2:66:a3:76:e8:d0:e0:c3:fe:94:ae:90:d1:88:17:
4e:58:af:28:bb:8e:44:f9:7c:1f:89:70:1c:65:8d:
50:3d:d5:1d:f1:96:2d:07:1a:00:a0:37:fd:17:a4:
a2:47:6e:40:c6:3e:ec:1e:7e:63:a5:5c:d7:d0:f5:
91:87:e6:64:3a:12:0d:d3:3c:75:03:ae:0d:58:ca:
9a:1c:65:82:78:45:5a:d4:dd:9c:d3:4a:4e:28:66:
9c:e2:f1:a1:25:fa:70:b2:af:ed:e7:94:96:f6:bc:
34:7c:1b:47:6f:74:89:f2:9e:76:fc:42:2e:f7:d9:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:71:BF:CF:D9:9C:0F:77:D2:23:74:38:B4:0A:85:F9:8B:F2:E8
X509v3 Authority Key Identifier:
keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:32:6b:a0:ad:82:6f:9e:e9:51:f6:ac:b6:13:7d:24:64:
15:5c:c2:03:95:ca:7e:cc:52:c9:d4:be:1b:b0:b0:74:e2:ec:
26:1d:77:22:64:ef:ac:ce:bf:06:2c:9f:e2:f2:9f:ed:db:29:
52:e6:13:12:7a:7e:c7:fa:ef:7a:ee:9c:df:86:68:9c:c0:c2:
38:1f:62:8c:5f:73:37:06:df:bc:02:49:96:65:6b:2f:d0:f9:
74:ee:d7:9e:32:e6:af:29:5f:9a:bf:7a:ee:ac:72:7e:a7:d3:
a3:ef:16:6f:11:af:f6:45:0b:f7:67:bc:94:94:fd:d6:64:eb:
99:c1:19:4d:eb:8e:c3:ff:e0:b9:94:59:18:84:21:13:84:e8:
58:fe:6d:cd:0f:7d:1d:bf:6b:f8:88:fd:e0:bb:73:a5:07:e0:
2c:4d:09:27:6b:41:c8:28:87:92:8a:b7:ba:1c:b3:46:65:9b:
53:4f:10:a9:65:68:84:e2:93:69:41:29:1a:1f:dd:c4:d7:91:
33:42:c3:32:be:65:44:9b:2a:a7:e3:78:48:e5:ea:3c:63:26:
a9:64:5d:ce:17:f7:7a:62:23:ba:5f:2c:61:59:58:38:9a:41:
60:46:49:48:4f:83:de:17:82:ea:4a:dd:a4:2b:0f:06:1f:2b:
ba:d8:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:53:27 2025 by rpki-client