Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: K59ThP2rduhSIX3PoE/71uDwLzaMHM8MQkubEEE1xrU=
Subject key identifier: 8B:4B:F1:BD:E5:23:D3:27:E9:F7:2B:E7:21:B1:6D:46:4E:C9:EC:B4
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 0199239FCF86B10A5467719260ED5B7BA8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:01:39 +0000
Manifest this update: Sun 07 Sep 2025 10:01:39 +0000
Manifest next update: Mon 08 Sep 2025 10:01:39 +0000
Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: 7WDHh6ozV/g5S+rkO7aiCplG1ULOU2NiYPYz7Gn0Gfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:cf:86:b1:0a:54:67:71:92:60:ed:5b:7b:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Sep 7 10:01:39 2025 GMT
Not After : Sep 8 10:01:39 2025 GMT
Subject: CN=8b4bf1bde523d327e9f72be721b16d464ec9ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:76:32:c4:48:32:8f:7a:d5:1a:11:89:b3:
bc:fc:8c:0f:0e:74:56:e1:57:89:d1:53:f3:53:90:
79:5b:ae:cb:eb:9c:c5:99:16:5e:fc:08:b4:8a:4e:
6f:d5:2b:36:db:bf:44:28:34:ed:2d:cb:52:3b:2b:
d8:5b:cc:5f:27:13:cc:14:e9:5b:41:bf:6a:fc:8e:
71:20:cd:be:7c:94:5f:32:af:9d:96:63:c4:43:99:
a2:68:12:65:ec:ef:6f:47:6e:80:d3:5c:f1:3c:e4:
ca:1c:5e:72:68:4b:cc:04:5f:e2:bb:ca:fb:1b:62:
19:7e:73:e8:0d:1d:f6:8b:e2:8c:34:1d:52:08:15:
c7:c5:93:2a:b9:24:e1:8d:4d:a3:08:9e:81:8b:48:
39:10:13:53:64:af:91:a1:7f:c0:88:92:3a:7a:26:
ed:09:9a:ab:63:7a:b0:09:ac:a0:5c:54:c9:49:2e:
b2:55:f2:3f:c9:67:eb:d9:0c:8b:6e:77:b1:22:52:
0b:0a:2e:2c:25:47:af:50:69:b0:bd:47:54:17:0d:
ad:3a:09:96:83:63:2c:0d:0c:4e:22:37:19:24:ea:
6f:8e:b1:3c:5e:fa:76:80:f0:ef:1a:d8:a7:ba:01:
de:2a:24:47:43:c7:cf:f2:ba:7d:06:be:e5:d2:08:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:F1:BD:E5:23:D3:27:E9:F7:2B:E7:21:B1:6D:46:4E:C9:EC:B4
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:da:5b:83:e8:e2:f5:d6:0a:a2:28:2c:3b:b7:75:45:d3:
2c:71:b6:c2:9f:05:ab:8b:b7:79:ae:71:90:70:f7:ea:15:b1:
0d:12:36:7a:a0:a5:a1:94:28:62:28:fb:cd:df:4a:ff:28:11:
1d:31:61:9d:40:17:08:c3:b2:6d:bd:6e:a6:2e:19:a7:37:dd:
5b:45:d9:a6:eb:90:17:02:de:29:2f:b7:9d:ce:94:9d:cb:dc:
ff:7a:36:dd:a2:39:19:33:70:ce:bd:86:40:4b:a3:16:53:3f:
2a:d7:25:54:74:5b:e7:37:30:5a:37:d6:a5:ca:0b:e0:2d:0a:
af:75:99:34:e3:f7:65:4b:81:12:e8:66:47:ea:f5:3d:c3:40:
1c:c7:42:16:69:2a:56:c9:9c:f4:3f:d8:5a:57:3d:47:eb:66:
db:6d:2a:a8:d3:e6:08:31:69:df:09:5b:0d:a5:13:77:f1:05:
b3:dd:c9:5b:5f:0b:92:2b:3a:3c:6e:cd:79:e6:ac:a5:19:fb:
31:c9:f8:49:c1:0c:c3:26:c2:88:a5:b3:8e:54:3e:de:19:ea:
6b:76:c3:18:cb:bb:ac:b2:8b:67:7f:1f:64:5e:51:9b:d1:01:
fa:d9:95:a0:6d:bd:60:47:e5:77:5c:1a:e2:6a:0a:b6:33:ed:
fa:eb:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:21 2025 by rpki-client