Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: hYhwXrQt44sQ82nYQoxpKGRaKT7SLzEjsZXZ7RR6KmE=
Subject key identifier: DC:68:58:6E:C2:09:24:B3:3C:75:FE:93:BE:03:44:C7:22:6F:D8:DE
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 01992B8FEA71B654E91C861782CEF532A89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0A3F
Signing time: Mon 08 Sep 2025 23:01:15 +0000
Manifest this update: Mon 08 Sep 2025 23:01:15 +0000
Manifest next update: Tue 09 Sep 2025 23:01:15 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: CnmwS2RwoxslQ8bdoGp0f4Wex1IaZHlKgQSLUwf+eD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:ea:71:b6:54:e9:1c:86:17:82:ce:f5:32:a8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Sep 8 23:01:15 2025 GMT
Not After : Sep 9 23:01:15 2025 GMT
Subject: CN=dc68586ec20924b33c75fe93be0344c7226fd8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:e0:08:08:ab:e1:f8:c2:47:30:67:b0:25:
f1:76:d7:cf:bc:ef:a7:3c:41:ef:96:13:8d:a3:de:
63:ea:bf:1e:83:7d:10:27:d1:2f:20:b5:7d:0b:9b:
9b:0e:79:72:45:3a:8f:e7:be:52:17:ef:af:94:a2:
5b:a5:bb:11:a7:3e:ef:1e:36:ae:23:1b:02:7e:2b:
fa:ff:76:0e:2d:bf:4b:a4:bc:14:0d:70:2d:73:7b:
26:af:7e:14:13:bd:c0:aa:be:79:df:69:9e:4e:1d:
9d:c9:7d:02:28:86:2a:cd:db:c6:b3:1b:9a:dc:b5:
88:e3:71:ee:1e:64:77:f3:d3:43:c9:52:64:50:9f:
11:97:da:7d:8d:2d:d3:c3:4e:87:61:07:bc:e0:ac:
70:d9:20:d0:66:41:80:ec:2d:29:56:50:d5:bf:57:
41:4a:cd:a2:42:d7:b2:7e:3e:f5:37:9c:72:95:6f:
d6:94:15:cc:e5:ea:d3:d3:65:01:d1:f1:ce:88:c0:
9d:8f:69:37:09:e6:3e:c7:75:1e:5d:e5:94:26:ce:
5e:8d:77:ed:71:fb:e7:f4:35:83:90:69:8e:86:a3:
f0:b7:bc:0a:cf:f4:30:00:cc:51:86:8e:17:c2:bc:
1e:7f:f1:65:5b:ac:d5:7d:9c:be:72:68:9f:3a:a3:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:58:6E:C2:09:24:B3:3C:75:FE:93:BE:03:44:C7:22:6F:D8:DE
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:80:e6:5c:1d:ec:01:f2:30:58:4b:fb:f4:8c:a0:cd:4b:
46:f3:03:15:80:9c:ef:c4:cc:37:37:f5:82:c1:50:2f:e4:bb:
88:e8:83:cf:8d:55:40:35:23:da:89:5f:ac:10:1c:0e:9d:42:
f9:6e:a6:aa:8c:fb:a7:4f:55:a4:63:13:49:55:cb:2d:cf:f0:
1c:66:5a:ba:6f:dd:4a:fa:a8:67:4c:dc:7b:bf:90:df:2b:29:
43:aa:c2:15:d0:c4:6d:3a:4a:d5:7a:ef:05:60:8d:e3:96:f8:
c2:b1:67:8c:e2:9e:80:f2:5b:73:5b:17:17:87:ef:06:16:c8:
2e:77:1b:8f:94:44:a6:54:b5:c7:ff:78:a3:77:05:6f:df:48:
68:6e:a7:42:ac:82:f2:39:ea:1e:04:6c:a5:cd:51:40:bc:5f:
9b:0b:ff:77:1c:2e:73:21:3b:d1:64:1f:fb:9d:4a:4b:7b:35:
5c:d5:7c:1e:86:15:5b:23:da:ce:60:bf:54:d9:c3:15:53:e9:
19:09:fe:44:a5:8c:9e:df:c9:a6:5d:38:e2:2c:15:2c:5d:32:
46:93:94:06:8e:f5:9d:57:c0:db:42:7d:a6:7d:a3:31:68:af:
a2:30:61:50:b1:8d:03:66:ef:6b:7c:3a:87:7d:b8:f9:1e:99:
7f:67:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:13:54 2025 by rpki-client