Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: kfDMYclGWYaJZnYt3nTMe3ry75hnBsfTdC0b0MSeNPI=
Subject key identifier: FF:E0:71:C8:1A:80:DA:BA:BF:B0:31:6D:1D:8C:CD:AA:CA:F1:22:6C
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 01992F35AE42F9C928EC4777B3836B8D3FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 16:01:11 +0000
Manifest this update: Tue 09 Sep 2025 16:01:11 +0000
Manifest next update: Wed 10 Sep 2025 16:01:11 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: QWi5rrnqTx7hasvnvDsB0C4XXl2NACaWslBuztAI0W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:ae:42:f9:c9:28:ec:47:77:b3:83:6b:8d:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Sep 9 16:01:11 2025 GMT
Not After : Sep 10 16:01:11 2025 GMT
Subject: CN=ffe071c81a80dababfb0316d1d8ccdaacaf1226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:51:29:8d:1c:c5:57:92:fd:fe:32:b7:75:
bb:e7:3d:6e:31:75:bb:bb:75:ff:3e:68:81:b4:b9:
1e:09:31:be:62:21:83:49:3d:8a:ad:cf:90:d3:98:
c1:a5:52:0b:fc:8a:82:fb:46:1b:75:c3:f3:a6:a0:
1a:8b:cc:c0:3b:14:ef:30:64:2c:f4:bb:35:28:81:
7c:a9:9a:af:d8:1c:40:c9:ee:e6:93:df:04:51:c4:
b4:b1:e9:45:4e:fb:85:35:b9:09:99:bb:ff:fd:1b:
47:94:3c:01:3a:31:e7:92:75:6b:2b:cb:cc:da:cb:
86:83:4e:64:c9:e1:ed:ba:4a:ad:f7:d2:8f:ea:4e:
e7:79:b1:1b:75:b2:db:a8:03:e6:ae:1b:56:25:5b:
22:fe:18:24:25:f1:a0:96:e5:ca:a3:03:0b:02:8a:
97:cc:83:66:44:cb:ef:9b:43:96:d8:cf:1a:bc:99:
93:84:7d:fa:1e:e3:f8:32:dd:4e:26:51:dd:0e:f5:
5f:5c:e7:c0:47:65:93:fb:8f:2d:5f:80:ad:6f:28:
54:c1:34:4d:4b:79:9b:c9:fd:35:0d:d0:94:8e:75:
33:d1:d4:2f:ab:86:f9:5f:82:4a:50:b0:de:a1:0d:
7a:55:e2:6f:8e:9b:b8:52:68:ae:43:6c:dd:f3:43:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:71:C8:1A:80:DA:BA:BF:B0:31:6D:1D:8C:CD:AA:CA:F1:22:6C
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c7:bc:00:9f:96:d6:3c:a5:a7:2d:65:0a:84:5f:5f:11:45:
4a:f8:e6:9f:e4:81:44:e2:75:14:f5:33:2c:d4:4d:ea:29:c5:
32:dc:9b:c4:8a:67:fc:d4:dc:95:a7:b6:86:c1:cf:73:df:15:
e2:1d:ee:8b:38:a2:b7:82:be:b5:67:e4:9a:ce:c8:c1:e0:3a:
20:b8:14:8f:e9:cf:e9:82:04:dd:ab:f6:55:60:1d:6d:a3:f2:
03:bc:e2:da:8d:26:0a:ba:00:5f:fb:e9:fb:33:55:0c:c0:24:
8e:e4:2c:c6:7b:4c:7a:1e:d4:b2:3b:3c:8d:28:ac:1c:20:7c:
b4:8d:00:6a:e2:9b:f6:76:f8:49:9b:8c:2d:21:54:03:fc:8d:
60:b7:68:63:39:ed:7d:70:92:a0:e3:ac:6f:2e:90:ba:16:e9:
53:84:fd:9a:f5:c9:54:ee:20:4f:42:88:5e:d5:d8:c9:cc:f0:
23:75:0c:d6:54:69:dc:8f:da:4d:cd:0a:6d:61:a0:ad:da:5a:
f9:23:d1:33:bb:fd:a9:ec:b5:5f:02:b0:0c:71:3b:72:92:4f:
3b:2c:68:c2:ef:a5:6a:b8:ce:91:68:67:04:de:61:5f:d9:05:
74:f5:b9:c7:b8:01:8b:67:85:02:39:53:22:ee:8b:b4:20:20:
eb:a9:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:57:47 2025 by rpki-client