Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: /t0NhxPRpbdNzWVYU/6BR721g9zsiTVl8Su/8+vp/s0=
Subject key identifier: 69:CE:F7:18:B5:40:CB:75:47:2C:01:1E:D0:30:F7:C3:C6:6B:86:B9
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019922FA088A15DFD934B3E95B3A848C057E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: EjewoJjzyOzQVVHnXpDm0IOc9DDImVVW/J+2yzrfx9A=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:08:8a:15:df:d9:34:b3:e9:5b:3a:84:8c:05:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=69cef718b540cb75472c011ed030f7c3c66b86b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:85:ab:e3:37:dc:b5:80:b4:22:95:11:71:
05:d2:29:f8:4d:5a:67:6f:6e:f4:ad:38:83:4f:36:
49:10:84:d6:e5:c9:08:c2:a2:cc:64:0b:73:dd:72:
f9:24:67:f9:ed:81:f5:b9:c1:68:bc:8e:ee:20:f7:
5b:ce:8b:4f:88:c5:72:12:e0:83:1b:52:56:8b:fc:
d7:00:4b:b3:53:5d:01:56:9a:e8:32:29:30:7e:19:
cf:4f:77:3e:ce:06:c9:f4:2c:d8:cb:d6:4e:fe:83:
89:55:7d:9b:60:d0:7f:f2:ba:44:7c:b4:40:88:33:
e1:81:ae:c3:25:d0:46:39:91:70:d8:a1:ae:29:eb:
f4:dc:de:90:20:70:a3:8d:25:5f:78:62:41:97:b6:
4e:00:7c:e7:02:d1:72:a1:3b:e4:04:ee:de:d2:23:
2e:91:99:cd:39:c8:cc:ce:31:ea:44:e0:12:ae:32:
c4:98:0d:40:c5:bf:bb:f9:f5:50:f1:a6:cb:a2:88:
4f:8c:fb:54:a1:aa:8b:36:71:c7:11:c6:ee:3d:f9:
b7:0e:e4:ed:f3:f3:51:5d:15:28:88:12:14:66:c2:
36:94:15:07:85:f2:8d:e6:d3:34:73:b8:28:d8:61:
52:28:9c:61:2b:67:73:28:0e:0c:f4:38:cc:1c:d8:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:F7:18:B5:40:CB:75:47:2C:01:1E:D0:30:F7:C3:C6:6B:86:B9
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0a:11:e6:18:63:b9:e1:aa:b7:5c:ec:b9:5a:f3:5a:3c:43:
72:55:fb:4d:9f:48:d2:44:5c:eb:28:47:7b:80:5b:cc:8e:af:
2c:cc:96:85:6d:28:b5:92:01:a5:7f:fb:cd:0d:ff:32:1d:0f:
d2:00:64:cd:64:4b:6a:b3:4b:a6:62:4a:af:ab:f6:95:ed:ed:
8d:ea:d5:f5:22:00:f0:5d:3c:a3:ed:e3:d8:b1:25:f4:6c:5d:
28:87:ee:fb:9e:ab:7b:9c:83:20:2b:05:f6:2c:1a:32:2c:45:
95:4c:95:d6:56:5d:0c:10:49:34:d3:da:57:7c:b8:6a:2c:f2:
20:30:db:5e:13:26:58:87:b5:8b:86:ae:1c:5f:99:fc:a3:7b:
a6:97:62:ec:e1:94:e1:7b:47:80:5c:a4:72:55:f6:4d:c6:5c:
28:49:5e:f3:c2:3c:a8:18:ba:bd:37:1f:0a:b0:42:f2:d3:eb:
29:a0:cd:59:99:38:e2:6a:ca:08:73:38:0c:75:bc:b4:02:f0:
5c:43:9e:fe:79:07:be:54:ba:e8:06:7a:1e:3b:22:39:42:88:
6e:81:79:6e:d5:cf:ef:7e:7d:c5:82:fa:f0:9a:e3:5f:bf:6b:
90:c6:f0:fd:de:a6:ad:52:93:d1:ee:fa:9b:46:71:a5:99:21:
1f:88:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client