Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: 9XjqjZSSQaMaSYXuoi/bbwbNc4koDvodgp3a4PD0tAY=
Subject key identifier: 15:55:DB:95:04:CC:E2:97:A5:30:D6:D3:33:23:69:9E:E6:3E:8F:C3
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 0199228C8CED1811FFA81CD48B7086C8B598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 9C
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: gPGvILp+0O6VnGNv+1i6iQSgXnoFZJAtbyO1578ndIM=)
2: dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa (hash: lU+saX5Y8NpUNdHr5ny3vDxig5SKi8AIgZItEb0hTg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8c:ed:18:11:ff:a8:1c:d4:8b:70:86:c8:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=1555db9504cce297a530d6d33323699ee63e8fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:01:df:52:78:d1:5b:e2:85:8c:a4:bb:42:
18:e4:0c:dc:af:19:bf:c3:7d:74:ab:d2:8c:c5:e0:
0d:9b:22:77:c1:18:ba:dc:1c:18:36:b1:43:6d:36:
d5:2e:11:61:18:89:35:05:fb:75:4b:e1:e4:27:a3:
e6:95:2f:f5:45:11:40:d5:3d:06:d4:42:ae:a4:ca:
fa:19:53:60:e1:b7:ee:9e:fe:85:86:1a:3f:17:53:
83:9e:be:c4:c5:56:a5:3c:fc:15:e7:aa:41:67:98:
d8:2a:2e:70:dc:1a:31:c2:82:f5:5a:fd:b9:75:f0:
75:59:d5:51:a2:a0:a3:e5:02:f7:54:2e:40:b8:67:
d6:6c:9f:06:5b:3a:76:56:bc:a2:ff:7f:86:f8:3b:
ea:52:44:99:52:f7:52:20:ce:9c:d3:1f:08:79:a1:
a4:a0:ac:02:e6:ec:62:33:a6:7c:c0:2f:a9:99:b5:
84:7d:b2:9a:67:a7:31:33:a6:79:f5:fc:cc:e3:e8:
4d:0e:7e:b5:da:0b:24:62:14:b3:57:e5:61:d7:f3:
07:49:26:a0:44:03:fb:f9:b0:69:b2:82:5c:8c:fe:
f0:ba:e6:94:77:6b:a6:e3:26:35:24:e2:ac:27:91:
c6:47:a2:1a:58:7a:7e:c3:ce:5f:7b:6d:d3:37:7d:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:DB:95:04:CC:E2:97:A5:30:D6:D3:33:23:69:9E:E6:3E:8F:C3
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:12:0e:d4:1e:43:fd:4d:c7:b0:fe:78:e9:fe:40:52:cd:7c:
0e:1d:f4:42:dc:56:fc:43:9a:b3:d4:81:ea:0e:22:33:ae:6e:
92:59:a0:07:39:24:42:91:e6:c7:5b:4f:80:ef:26:b7:f7:98:
ba:f8:b5:2c:3c:f5:5b:10:00:a8:ee:b6:6d:b0:66:d6:33:e8:
33:9b:8e:5e:77:fb:3c:a8:6b:56:bd:1b:d3:37:e2:ea:d0:e5:
98:bd:9a:b2:6e:c0:6d:fa:e0:66:d4:0c:ff:38:fb:68:a5:ff:
ad:2b:78:5a:84:78:a0:2a:37:5f:48:18:fb:5a:63:87:e0:d1:
17:4b:43:71:e2:a1:70:3c:ad:9f:53:f1:e1:05:ca:1f:17:b8:
21:ff:ff:6a:55:67:43:13:bd:2e:81:e1:dd:2b:de:29:a7:5d:
0f:41:90:65:a3:d8:95:56:99:05:e4:67:47:49:59:21:8e:83:
3b:7b:2e:1c:e6:e1:b5:28:65:cc:c0:56:e2:69:a3:b0:f3:74:
98:4d:38:12:01:90:b2:de:a1:82:c6:0f:04:0b:29:e5:a2:58:
ad:ad:45:20:79:13:24:1b:b6:39:de:c6:f6:e9:70:0e:6f:e2:
3e:02:15:f0:a6:75:63:6a:ec:f8:42:1b:7e:6f:63:10:38:de:
f9:f3:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:27 2025 by rpki-client