Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: J7UFyd7ZQ1d7XSnY5UHVuxAPDl5KjdGuAqSquHqEPLM=
Subject key identifier: 74:98:7C:A0:0E:02:73:D1:49:32:66:4A:39:8A:CA:35:DE:40:F2:9D
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01992F6C7DEA82FDCB167B177AE1DA3AB040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0EED
Signing time: Tue 09 Sep 2025 17:01:03 +0000
Manifest this update: Tue 09 Sep 2025 17:01:03 +0000
Manifest next update: Wed 10 Sep 2025 17:01:03 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: Ls2TPqu2x3RF2Hqb10TDM6LklBDfhwWYZeYQc2ZpOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:7d:ea:82:fd:cb:16:7b:17:7a:e1:da:3a:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Sep 9 17:01:03 2025 GMT
Not After : Sep 10 17:01:03 2025 GMT
Subject: CN=74987ca00e0273d14932664a398aca35de40f29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:11:b6:42:17:0c:70:97:b8:28:ef:83:e0:
0f:3a:74:d4:4e:16:db:12:5e:02:4a:51:97:ef:63:
22:3b:ee:6b:0c:49:32:f0:27:08:44:bc:a7:03:fa:
e1:96:83:84:c7:62:e0:51:ae:2f:8c:e9:7c:33:c0:
19:fe:75:2c:b1:c2:53:3b:55:c0:bb:ba:1c:a1:b4:
f4:98:b8:6a:e6:94:eb:2b:53:35:6e:5e:02:b9:87:
ae:00:f3:a8:29:bf:ec:8e:79:ff:bc:9c:9e:53:39:
d5:90:54:83:87:36:27:25:1a:4f:2a:19:ba:aa:d7:
9e:b8:5c:49:3d:5e:a2:22:71:65:ef:63:e5:dc:fe:
61:2c:9f:6d:d2:26:b4:51:0a:51:3c:51:82:30:a5:
da:97:01:a0:5e:41:e7:a7:d6:0d:0c:11:26:df:cc:
bf:bf:4b:e2:60:44:73:0c:23:91:8b:63:f2:45:e3:
65:30:11:70:f1:d8:77:0f:bd:80:24:0c:17:03:51:
b5:0b:97:f1:bb:2c:35:27:8a:f1:cd:29:55:46:6b:
26:2e:78:a6:34:af:95:c7:3c:ce:8c:3a:39:af:14:
b9:86:d5:4a:7d:26:49:62:92:2e:b6:b1:83:e7:de:
65:26:d1:81:04:5f:b5:4d:e8:f4:04:40:f0:a8:d0:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:7C:A0:0E:02:73:D1:49:32:66:4A:39:8A:CA:35:DE:40:F2:9D
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:87:26:90:df:9f:97:39:7d:7a:a4:b2:19:c5:12:b5:cd:
f1:26:6a:50:8c:49:8d:ad:ca:5f:dc:55:a4:dd:51:3d:c9:87:
c6:38:d5:34:7d:63:c5:62:75:8d:2b:e4:60:ff:42:af:9e:30:
33:06:87:f5:e8:8f:3b:b1:b4:9e:06:8a:7c:cc:87:78:57:b1:
04:af:40:59:76:f6:03:15:09:29:e4:f3:a4:12:17:5e:95:ea:
78:cc:91:e7:a1:ba:a5:9e:19:12:00:47:1a:f3:c4:5b:58:c1:
43:b4:1f:3e:01:d1:ae:3b:30:d4:87:2f:94:d2:69:13:62:38:
fc:23:b0:44:b6:36:b4:43:d2:52:b5:81:cc:25:48:30:8c:da:
71:ef:50:ee:e2:ba:54:b7:72:09:6b:4b:ed:bc:f0:63:30:5d:
cd:14:69:ae:21:1b:a4:5d:aa:1a:9a:ea:c7:a8:1b:39:4d:53:
5d:7d:37:a1:0f:28:cf:47:44:31:b0:80:96:ea:c3:07:0d:4f:
f0:19:b7:22:c1:00:41:55:4c:4a:42:97:6a:2f:ba:78:85:1e:
fb:5f:80:91:9d:16:b8:36:60:8a:2f:02:96:c1:0a:e8:71:d3:
2a:4d:79:2d:c4:4c:fb:a9:0c:78:da:4e:8c:7d:8d:0d:e1:2c:
d7:dd:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:28:56 2025 by rpki-client