Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: VlBW3ACIlEd0rxMWItjouFw3SzzwPzCH1E7nVB1vRlc=
Subject key identifier: CB:84:CD:DF:6C:B0:FD:DB:43:39:94:B0:CD:96:75:59:AB:55:17:0E
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0199605937F18F610A38B3FFC07AD0DFCC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0859
Signing time: Fri 19 Sep 2025 05:01:23 +0000
Manifest this update: Fri 19 Sep 2025 05:01:23 +0000
Manifest next update: Sat 20 Sep 2025 05:01:23 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: zzTu1UPX+Cu7rOkm07y1TpGhOcuQJ+KjqzR0XRAgIws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:59:37:f1:8f:61:0a:38:b3:ff:c0:7a:d0:df:cc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Sep 19 05:01:23 2025 GMT
Not After : Sep 20 05:01:23 2025 GMT
Subject: CN=cb84cddf6cb0fddb433994b0cd967559ab55170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:c5:d2:f1:2e:1d:6b:b1:34:6d:81:0b:0c:
15:96:9e:05:75:c4:5b:0d:33:9e:0b:30:0a:32:07:
10:93:e3:4c:d6:45:59:44:e1:b8:d2:de:3d:21:20:
29:d0:1b:c9:31:a7:2e:db:1b:2d:a4:5b:1f:eb:3d:
36:bb:de:cf:56:70:b4:d5:fe:ab:83:fe:2e:a4:7d:
4b:87:57:43:d3:77:e7:77:1e:98:1b:5c:c7:07:3d:
a6:b9:fa:1a:20:89:27:0e:5f:b7:61:0f:05:01:43:
03:03:1f:5b:79:21:a5:19:09:ff:c8:e1:62:59:a6:
a1:e8:75:3a:be:31:87:c3:7d:fb:dc:b7:46:74:1e:
5e:13:df:1b:38:9d:18:e2:a1:42:6d:76:a1:e7:f0:
fa:31:65:98:5a:56:5a:4f:f4:88:70:a2:03:cb:ca:
d4:ea:34:4e:ed:e0:06:34:d5:28:24:36:db:78:15:
24:84:85:ba:a1:fa:4a:40:51:f4:81:85:dc:d4:76:
d6:c8:2b:42:3a:cc:52:f2:ab:9f:81:b1:d0:19:41:
af:ee:93:b7:cd:2d:ae:27:37:86:a4:fd:83:c0:76:
9e:9c:5b:8e:5e:21:4f:6b:29:70:54:04:55:42:bc:
17:93:18:36:e6:91:e4:9f:94:00:73:4e:e0:27:a6:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:CD:DF:6C:B0:FD:DB:43:39:94:B0:CD:96:75:59:AB:55:17:0E
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a2:15:c0:fd:85:1e:7e:30:2c:93:d7:72:63:b8:1f:af:25:
c5:6d:46:98:68:67:ea:ac:49:0a:d3:c1:f6:41:9e:80:ec:ce:
80:90:cb:0e:ae:b5:f0:1e:18:5d:d3:5c:d4:6a:c7:6f:6d:fd:
13:ef:30:6e:11:f9:47:c0:40:59:ff:57:0e:8b:f2:44:21:40:
bf:e4:cc:d9:a3:2e:58:1d:48:40:9b:93:7a:c2:8d:66:96:84:
95:07:49:81:c2:5a:1f:ce:96:f2:5c:b2:0a:20:7e:f2:49:4a:
dd:7a:05:a4:c0:00:7c:e1:ad:cb:a9:1f:92:a3:a8:ee:3e:28:
50:25:e3:78:76:6a:52:b1:bc:c9:d0:cb:4b:d6:52:5c:50:98:
d0:f3:90:63:0c:3b:83:9a:7e:b6:95:6e:3e:99:20:89:7b:c2:
db:0c:07:45:8b:5e:fb:1d:7c:74:3d:35:a6:1e:e4:80:63:a0:
d4:bc:74:38:8c:81:bd:83:a2:bc:4d:92:10:0f:9d:a2:9b:e8:
06:0a:67:56:f3:e3:2b:ad:2a:31:d4:ed:2c:d6:c5:d5:47:50:
6c:a3:70:b7:5c:19:b5:fe:b1:a1:42:96:06:98:57:5a:9d:a3:
c4:28:89:eb:33:6e:31:ac:fb:a3:90:4c:66:af:85:38:74:e3:
e4:55:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:54:36 2025 by rpki-client