Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: jWy+TNc357rrCWzqyHc3ng02+Mt7sQ06+OkfqjzsIGY=
Subject key identifier: 9C:C3:09:63:51:6B:25:75:F3:A0:85:7F:21:2E:71:D7:2D:66:DD:23
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019938702E5338FA8532B8EF150A2EED63C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 11:01:39 +0000
Manifest this update: Thu 11 Sep 2025 11:01:39 +0000
Manifest next update: Fri 12 Sep 2025 11:01:39 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: yeNS932eAIMvEVUUT24m/ofIy0wKjYzDggvyVIboYuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:2e:53:38:fa:85:32:b8:ef:15:0a:2e:ed:63:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Sep 11 11:01:39 2025 GMT
Not After : Sep 12 11:01:39 2025 GMT
Subject: CN=9cc30963516b2575f3a0857f212e71d72d66dd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:bd:7a:be:8e:6b:88:17:b7:85:1e:a7:9c:
4f:59:7d:68:89:d2:25:ad:16:29:d1:eb:44:47:e2:
1d:a1:32:2c:31:18:0a:16:ff:c5:1d:49:9b:6f:8b:
1c:04:1f:fc:22:18:b5:d1:d5:f2:89:c4:0f:4c:d0:
22:a2:fe:08:60:e3:db:c8:f7:59:31:c3:de:31:f2:
5b:93:7e:23:7e:48:1a:f9:53:40:c6:3a:38:88:49:
99:1d:18:a2:17:1f:ec:eb:82:94:75:62:af:62:62:
ff:38:ba:b8:e4:8c:3a:9c:a1:0b:ab:de:b5:64:1e:
60:8c:16:bd:e4:77:b2:28:7d:a4:e0:a5:ec:c6:ca:
7c:0f:0b:10:c2:c8:c4:8e:f7:e7:b7:a3:c0:18:71:
a0:41:66:6a:7b:72:c5:bf:51:c1:ae:ad:f3:85:c3:
7c:15:9e:34:b0:06:98:21:ad:a7:39:23:bf:ec:63:
41:dd:c8:be:40:3b:ef:b0:31:a4:38:d6:51:33:78:
86:1b:f5:19:4b:02:dd:65:1b:93:4f:dd:6c:7a:c8:
66:03:de:2d:1a:d8:7e:bf:d0:39:98:7b:04:1f:13:
5b:e4:b4:26:50:9a:87:9b:0b:04:b8:69:75:9c:30:
b7:60:22:8f:d1:7e:87:a3:22:37:a3:80:45:1b:97:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:09:63:51:6B:25:75:F3:A0:85:7F:21:2E:71:D7:2D:66:DD:23
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7a:94:03:f6:6b:27:2e:29:dc:3d:44:4e:f6:9c:ad:e9:40:
2a:24:6d:f4:2e:c8:3e:b0:23:fe:4a:4c:1b:51:ec:4e:c0:a8:
97:d8:a0:e6:93:b4:95:e9:f1:e4:1f:0a:15:74:6e:70:64:78:
91:c9:f6:ce:3a:b0:05:b7:66:36:75:6c:47:9a:da:55:1a:11:
b3:55:e4:98:80:5e:85:61:40:78:99:ca:d4:1b:eb:bf:9e:96:
8a:e8:05:b6:9a:38:1e:09:33:5b:b5:e4:3d:81:95:8a:54:25:
b0:45:f6:28:18:88:2a:92:56:d1:9d:b1:c7:bc:c9:33:f7:de:
ab:81:ca:5f:d6:0f:6b:d1:f4:75:1a:d6:5a:ab:db:3d:61:dd:
65:36:5c:ea:27:35:07:f0:1e:2f:9b:2b:eb:85:73:7d:b0:03:
bd:17:54:d3:6d:66:7d:e2:69:65:4a:bc:ea:ce:a4:2d:8a:f7:
e1:3d:d4:ee:65:86:57:f6:78:8e:8c:b9:63:16:55:46:81:30:
1e:9a:38:6c:3d:d9:26:1b:2b:31:bd:2b:af:44:e8:21:cf:d3:
01:e4:88:27:ee:da:d5:f3:df:86:49:6a:f4:ef:cf:bb:6f:30:
b6:55:30:42:ae:db:25:72:db:0b:af:71:71:1a:5c:9b:02:41:
ac:ef:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:21:38 2025 by rpki-client