Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: OqyPLOgAf9AQckq7XcSwx0THvd1mgmSeplAeF48DVrQ=
Subject key identifier: 41:94:0B:24:9A:B7:2A:52:B1:B6:A0:A4:F2:89:8B:26:0E:68:B2:DF
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 0199277D2D3400D531F485412CBFC0527117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1681
Signing time: Mon 08 Sep 2025 04:02:18 +0000
Manifest this update: Mon 08 Sep 2025 04:02:18 +0000
Manifest next update: Tue 09 Sep 2025 04:02:18 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: QhWdkqsNo92zRNkatX2lIrg5MbXlo+oGbSqroDIaLVQ=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:2d:34:00:d5:31:f4:85:41:2c:bf:c0:52:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Sep 8 04:02:18 2025 GMT
Not After : Sep 9 04:02:18 2025 GMT
Subject: CN=41940b249ab72a52b1b6a0a4f2898b260e68b2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:6a:0f:dd:26:03:c3:c2:14:3e:61:b6:b7:
b7:cb:42:08:a4:73:01:d7:2b:40:4c:74:d1:4d:bc:
e5:5f:9f:0f:32:56:c7:cf:a5:9f:7d:a3:ce:04:ae:
50:ef:3a:72:65:99:49:46:96:75:c5:56:4d:56:08:
db:86:4f:5a:f2:1b:e0:49:28:68:1f:01:c5:95:ef:
5a:ae:c4:56:65:6d:db:ff:b7:4f:c0:c7:16:90:57:
a0:e9:0a:63:ad:07:7f:00:f9:e5:9c:e6:11:d3:c3:
5f:f1:e1:64:4a:10:36:15:0b:09:5a:34:5e:d9:9a:
03:ef:bb:14:96:ff:01:6e:3f:67:fc:4d:27:6e:16:
e9:d7:b3:cc:0c:e8:0a:57:50:90:c7:23:8f:b1:e0:
76:a5:c8:ae:04:1a:7a:76:18:05:e1:d3:36:2b:b2:
85:fa:49:36:95:66:59:be:ab:aa:92:ea:d1:39:11:
8e:a7:fd:13:84:98:c6:d0:a7:a8:24:b3:a3:7b:43:
cd:a4:1e:10:95:33:cb:a0:6a:0c:94:af:66:52:50:
5a:67:9d:34:5b:f5:c4:0f:0b:6d:43:a2:a4:27:9e:
10:04:4e:b1:10:99:23:76:34:56:3f:8c:70:a0:e6:
f4:2c:b0:ae:f5:77:09:c0:0d:39:bf:06:e0:32:d4:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:0B:24:9A:B7:2A:52:B1:B6:A0:A4:F2:89:8B:26:0E:68:B2:DF
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:46:13:37:85:a0:de:79:36:37:b7:89:d7:7b:9a:bc:86:
41:4c:e0:71:21:32:67:d2:6a:cb:94:52:53:92:db:8a:76:fe:
21:c3:66:86:14:6f:c1:14:b1:cb:77:e9:40:4f:3b:a6:a3:1d:
ce:7d:dd:4a:9d:b4:47:e1:89:ea:22:b0:c5:ec:3d:29:d2:78:
68:bb:a0:eb:4e:7b:21:c9:0e:4f:fd:1a:84:60:1f:c9:46:95:
7c:ed:60:f4:7b:72:5a:22:e0:71:67:de:44:29:eb:b1:15:c8:
81:6e:5a:f4:c6:92:58:06:19:25:75:d6:66:83:62:cc:0a:81:
81:bc:2f:c1:2c:92:37:5d:f3:73:ec:0d:b6:73:ac:aa:dc:1e:
fd:29:97:45:3a:02:8e:f9:ab:f9:fc:60:ec:56:38:5d:19:88:
1b:4f:59:8a:40:69:79:9a:c7:cc:3f:74:7b:4b:5c:ac:e2:66:
13:17:3d:49:56:1c:94:2e:7a:d9:36:cf:3e:e3:9e:ff:ae:3a:
32:39:e5:4b:f5:07:46:9d:55:fe:c6:83:a0:61:af:a1:5e:df:
c4:a0:bb:9d:32:02:88:e9:12:a4:96:cb:1e:60:1f:bb:d8:d5:
1d:a1:12:e3:2e:ea:43:37:9d:0c:94:e5:83:d4:0f:66:54:60:
6d:98:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:50 2025 by rpki-client