Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: FK+zxHxONiaqeAsDLghGJIrBZ5+d+t7BsbcN2lLgNZQ=
Subject key identifier: E8:AE:7D:72:57:7D:54:03:D3:0C:93:74:7C:CE:BE:5D:38:76:5A:83
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019922FAD02F12C5EA313ED6A214B89D3D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 1637
Signing time: Sun 07 Sep 2025 07:01:26 +0000
Manifest this update: Sun 07 Sep 2025 07:01:26 +0000
Manifest next update: Mon 08 Sep 2025 07:01:26 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: ihOorOvrYDwy8Z8RGv3fH5vT6tCQ0aKzEO9Sy1u+QiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d0:2f:12:c5:ea:31:3e:d6:a2:14:b8:9d:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Sep 7 07:01:26 2025 GMT
Not After : Sep 8 07:01:26 2025 GMT
Subject: CN=e8ae7d72577d5403d30c93747ccebe5d38765a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:b7:54:a2:63:b0:2e:20:7f:ee:ed:b7:f5:
f6:6c:18:37:35:0f:a5:c3:2c:5c:04:66:8a:91:8e:
f9:c2:b2:51:6b:14:4c:43:d1:4b:bd:ce:ba:46:24:
98:eb:16:34:a2:b0:cc:35:d7:64:7e:61:78:90:5e:
e0:49:6b:4a:4f:d2:02:f9:cf:b4:ca:d8:49:1c:07:
03:a0:e6:70:64:cd:bc:1d:7b:d9:5b:58:43:67:a7:
77:ba:b2:a5:56:95:34:fa:89:11:c5:2c:48:d6:12:
7b:b2:b0:99:c4:9b:33:e7:fc:46:cd:c2:15:40:0d:
6e:9a:e4:62:80:f4:06:0b:17:cf:3a:0d:14:03:ac:
03:b4:00:fd:64:c2:2f:79:ee:cd:95:32:18:fe:16:
15:56:6c:b1:8e:1f:c2:6c:8f:82:86:34:36:72:9f:
16:23:5e:cf:ca:ec:ab:5f:b2:05:80:70:a4:b6:34:
47:81:45:97:22:51:bb:d0:da:85:db:e6:04:d7:e1:
1c:a4:06:68:0d:17:78:a8:dd:05:5b:24:e0:03:83:
37:75:56:a3:b9:84:04:6e:4d:fe:c9:87:d7:4b:8e:
9a:6a:2e:5d:95:3b:b8:dc:14:34:64:f6:c3:d6:2b:
21:f1:40:9e:4f:ec:66:d4:17:78:19:3e:21:ce:92:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:7D:72:57:7D:54:03:D3:0C:93:74:7C:CE:BE:5D:38:76:5A:83
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a0:9b:5b:b3:95:d2:96:9e:4f:f5:bc:2a:c9:56:09:3e:99:
6b:c6:7d:97:10:38:45:b0:b7:5d:a8:63:95:6c:d8:68:ae:7b:
5f:24:bb:da:9d:12:58:ce:0f:87:6d:d9:81:d6:63:e0:8f:df:
a0:16:32:a3:9f:46:02:14:86:a9:8f:7e:de:5b:43:df:e0:ba:
3d:1f:3a:e1:b5:35:5f:78:72:e0:d3:7c:74:2d:3e:f5:dc:4b:
d2:b0:1f:b3:84:0b:95:d8:d1:30:b6:57:13:3c:6d:f2:ee:9a:
01:37:75:39:f9:aa:9c:d6:d8:49:ee:3d:f8:ff:23:26:18:87:
fc:8f:41:62:4c:fa:cb:b4:28:8b:43:bf:81:dd:f8:ab:41:87:
37:b9:d7:ca:03:65:3b:4a:05:96:6d:0e:46:5d:2d:b3:6a:22:
c1:fc:0c:b2:06:6b:a9:b9:91:20:dc:a1:fb:29:7f:04:60:d5:
5a:5a:55:05:1c:ef:82:96:3e:86:34:db:93:94:d2:b2:5f:59:
87:80:ac:11:d5:99:42:ee:7b:9c:64:1e:32:16:11:39:a7:36:
8d:24:0b:77:91:d1:43:2a:ab:40:03:e3:43:7c:18:5f:83:56:
21:b3:58:e7:a5:3e:bf:5f:ac:97:00:03:49:a3:eb:e7:0b:af:
71:63:47:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:44 2025 by rpki-client