Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: 1IAvBCs0BKYJoKPCO9w+Wr+SZ8t4Al6Ycni4LuuKYQ4=
Subject key identifier: 98:36:E7:D3:38:46:07:3D:33:80:84:93:7A:E3:5B:8C:4A:55:5A:D1
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 0199179B33E2A08121BA4627D6B8EF9AD0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 02:01:11 +0000
Manifest this update: Fri 05 Sep 2025 02:01:11 +0000
Manifest next update: Sat 06 Sep 2025 02:01:11 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: Kq8j+/u6c/xaXHqKFS3BSgRDd7xB2+802sTiCjM9eJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9b:33:e2:a0:81:21:ba:46:27:d6:b8:ef:9a:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Sep 5 02:01:11 2025 GMT
Not After : Sep 6 02:01:11 2025 GMT
Subject: CN=9836e7d33846073d338084937ae35b8c4a555ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:99:11:49:db:b9:f9:89:f6:d3:9b:b4:92:
e6:34:2d:07:49:2e:7f:e1:25:c6:b6:9e:bd:61:53:
12:7e:e6:c8:b3:bb:e3:3c:0d:90:93:71:d7:46:b9:
49:1c:b1:8c:ce:61:11:97:ad:e7:d3:f4:7f:0f:58:
48:76:e2:63:99:4f:e4:30:b6:79:7f:45:41:5b:f1:
63:a4:f9:01:cc:b2:28:50:f9:08:29:38:40:6c:d5:
59:c5:1d:d1:71:2d:f1:1b:0d:51:42:32:5b:f5:d7:
cb:d9:87:94:27:bf:6c:5b:45:0b:74:38:de:72:3b:
a4:0f:cb:db:1c:e8:34:77:f1:80:d3:10:88:4d:e6:
91:5b:60:83:53:8b:a8:ff:9d:88:e1:c2:c7:88:88:
1a:40:6f:cb:20:63:b4:93:ad:09:44:0f:64:9b:1b:
65:89:88:b4:87:41:e3:df:81:2c:c8:98:70:1b:73:
43:79:18:10:81:87:51:c5:e6:f4:a8:43:ad:e5:d0:
e5:48:5d:17:4a:f1:28:07:6f:41:04:77:c0:fa:ae:
60:10:ea:68:d7:d7:26:a9:69:b0:e8:32:26:d9:d6:
f9:b0:14:2c:dc:65:b1:9d:ff:ce:cd:74:3c:66:e9:
e5:ab:f3:38:f7:a7:9b:aa:3d:39:dd:19:82:a0:32:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:E7:D3:38:46:07:3D:33:80:84:93:7A:E3:5B:8C:4A:55:5A:D1
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:95:6c:4d:c1:77:50:ef:c7:08:d1:95:f9:62:b6:10:d6:
b5:6c:b3:3a:61:1b:6b:d4:0a:e5:61:2e:e8:4d:61:1e:f6:62:
44:0f:f4:4e:0c:1d:55:74:42:a2:0b:4e:5c:8f:06:e5:9e:9d:
b7:8b:47:0a:de:0d:6b:ca:51:67:6f:08:46:c3:b5:06:9a:a5:
84:01:52:d0:ec:55:f2:f6:19:77:db:e2:b6:cd:ea:03:5d:3a:
ae:dd:05:e1:72:5c:2d:b9:e4:7d:4b:56:91:74:9c:b8:2d:c2:
c1:2b:93:dd:bd:3e:c3:00:de:67:7c:c2:63:7c:a2:e1:d6:c1:
0c:22:83:17:86:13:cf:cb:5b:f3:1e:94:b5:fa:56:bc:62:6e:
c3:0a:9f:e3:dc:e0:aa:1f:15:92:81:24:5e:50:9a:fa:57:91:
42:36:6f:d8:6c:49:0e:9d:51:b2:5a:2a:ea:fb:f9:54:f1:e6:
18:7e:59:20:e9:e4:69:bf:af:9f:d5:67:e8:b9:38:db:a4:cd:
b2:ed:02:62:c2:e7:2e:9b:d9:c3:94:98:14:b4:20:e8:fd:e8:
c2:ae:ae:14:be:f6:66:6e:b2:86:e2:1f:a8:ff:d1:a1:9e:9f:
83:ba:1c:eb:1b:9b:92:a6:97:37:58:7a:96:23:71:e8:ba:b0:
4d:d0:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:31 2025 by rpki-client