Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: W7Irh6QarKwpqPTmX9THvENG1Aj56s1x7+RmNmDVamk=
Subject key identifier: 11:C3:1D:DD:F1:A4:9C:A7:D2:6F:66:86:41:30:DB:A8:CA:BC:8D:FB
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019922C37F9D94EF744BD76AFCAE2F6404B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0DD8
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: H4VOq97CUBIn4OhGUmGfvofnPcRufAKh+Gn3/TbbSJY=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7f:9d:94:ef:74:4b:d7:6a:fc:ae:2f:64:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=11c31dddf1a49ca7d26f66864130dba8cabc8dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f6:8f:8d:f8:bb:df:81:dc:2a:cf:db:0c:18:
9d:15:ee:4b:fa:2d:60:aa:65:17:62:a3:4c:a7:a1:
7a:d8:ab:79:6a:5f:f8:5b:4d:fa:7e:e5:02:26:c4:
db:96:93:aa:98:75:5c:6e:b8:c2:4e:cd:76:98:bb:
b9:72:88:f0:22:e5:8f:35:75:c7:72:74:0b:81:29:
09:d2:43:89:f2:d5:4d:f9:72:51:5e:69:16:9c:82:
8b:92:09:ad:5d:ee:c3:48:e8:44:aa:4c:12:12:0e:
48:c8:47:8e:8c:76:73:60:17:5f:c9:a9:cf:4f:49:
f6:bd:7b:18:dc:c2:0d:e4:ee:5d:30:2b:62:40:15:
cf:b3:f9:00:d9:30:e3:d2:2f:04:d1:af:cd:bf:33:
11:3c:fb:e0:38:fa:53:32:07:fe:e8:f0:e7:c2:56:
be:63:e6:18:c6:ba:f6:63:3d:91:9e:17:fc:a3:05:
9b:71:33:eb:18:f6:8b:d5:ad:22:8a:e6:a7:74:c1:
19:48:75:9b:2a:ba:4b:84:1a:17:fc:68:9e:37:88:
e3:83:38:d9:a6:ec:df:b2:34:02:b7:fa:e2:40:a2:
16:a7:bd:eb:74:79:37:37:96:98:1f:c4:00:a6:04:
b7:8b:f0:e7:c7:a9:17:01:41:5e:2e:e0:2f:77:f3:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:1D:DD:F1:A4:9C:A7:D2:6F:66:86:41:30:DB:A8:CA:BC:8D:FB
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e5:db:c5:e8:75:3e:8b:f6:ab:c0:81:ba:0c:1c:4e:d3:c9:
de:ea:87:e9:ca:6e:b6:34:5b:c3:ce:58:e9:a2:ad:dd:6f:f7:
c0:b8:4b:a7:88:0f:46:55:ff:29:5d:b5:ba:30:04:6b:21:94:
12:c6:ee:22:db:60:20:04:7e:e3:b2:70:af:39:c4:a7:39:fc:
71:8d:e5:d1:13:c7:bd:d0:9b:f5:85:8f:30:03:e7:eb:1a:dd:
24:13:3e:f2:2e:c8:9d:76:81:06:d4:b8:e1:cb:29:25:c9:00:
c4:a4:43:63:64:ce:0e:2b:0b:7b:99:ec:31:82:72:ca:42:af:
d3:4f:a5:24:d5:96:cc:cb:9d:74:63:7b:3b:09:56:57:ee:8d:
5a:fa:17:cf:f5:55:27:5d:19:45:a4:74:70:2e:65:07:d8:ba:
09:cd:ad:de:21:1c:59:8a:a1:62:f3:c7:6e:bf:15:02:ac:a7:
87:4f:a0:fa:59:47:31:61:ba:20:72:53:4a:1e:5b:e6:24:a1:
9e:d6:3f:d8:a3:88:a9:6a:25:bd:04:28:dc:a3:16:e3:19:7a:
a1:89:71:e6:97:ef:af:51:11:7f:c0:45:b0:ab:d8:fd:80:72:
b3:e8:b1:ad:47:d2:13:ce:09:f4:87:be:dd:bd:e9:06:80:b1:
87:74:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client