Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: kjYU3xu1efFYTI2+Kx1TcMSEuF/xuPq1Tzr9N9sNlG8=
Subject key identifier: A8:4F:8D:FB:14:CC:62:2B:F8:B3:EE:EE:75:A3:E7:F3:95:09:82:7C
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 019951FAB35D2DB972685DD8D699BD60148E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 0232
Signing time: Tue 16 Sep 2025 10:03:28 +0000
Manifest this update: Tue 16 Sep 2025 10:03:28 +0000
Manifest next update: Wed 17 Sep 2025 10:03:28 +0000
Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: e01QMayQsYdzUzEgq3U1+IETFnLWLh07eKD6sklG3Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:fa:b3:5d:2d:b9:72:68:5d:d8:d6:99:bd:60:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Sep 16 10:03:28 2025 GMT
Not After : Sep 17 10:03:28 2025 GMT
Subject: CN=a84f8dfb14cc622bf8b3eeee75a3e7f39509827c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:9c:a5:c6:6d:cf:e1:45:ff:7d:fb:3b:1a:
57:61:e6:17:50:ae:79:08:65:71:b2:f6:c6:69:ba:
7e:93:14:42:e9:7f:04:2d:d7:a9:1b:8e:e5:11:c7:
d5:f2:13:42:67:c6:d8:8f:f9:21:33:77:3e:2f:3a:
4a:d9:f2:d4:5b:51:c2:15:df:6f:a9:83:7b:d3:da:
c5:48:e3:5e:fd:01:2f:c6:9a:b5:d4:76:e6:8f:8f:
4d:1a:1f:84:ac:6f:57:64:28:6a:d5:96:78:1f:52:
37:ac:5e:b3:7b:ca:dd:1e:69:57:c6:e5:78:56:24:
23:b4:f1:94:84:d8:45:14:c0:00:3a:ae:85:b6:a3:
5f:d1:b2:c1:af:44:84:ea:0d:9b:33:05:bd:95:5e:
03:5b:a3:a6:96:63:5d:85:27:ac:1c:75:d8:9a:9c:
55:71:8d:f7:d5:a1:b3:bf:0b:ad:0b:60:6e:3a:79:
5b:66:6b:7b:f3:f0:2d:1c:73:0a:ab:ca:b0:7c:af:
14:16:a0:b1:f9:af:bd:e2:b8:bc:68:4f:57:08:a4:
1f:58:4e:20:81:a4:37:2d:d4:6f:2d:71:33:c2:3f:
77:88:f7:5e:ba:ff:d1:8d:ec:11:c9:32:e1:ed:23:
52:db:5d:8d:77:b0:84:1e:42:0a:87:85:73:f7:27:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:8D:FB:14:CC:62:2B:F8:B3:EE:EE:75:A3:E7:F3:95:09:82:7C
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:61:22:28:38:f4:79:42:e6:61:b6:97:16:b7:57:d1:e7:27:
6e:4b:ac:4d:3d:4a:08:89:fd:fc:93:1e:d0:f0:3c:df:8f:d9:
8c:c5:e6:2a:b8:4e:b0:55:80:67:7b:67:17:90:04:3a:18:ce:
fc:f2:52:8e:3f:d2:2d:0c:19:c4:f6:cf:fd:d9:45:af:f9:ea:
64:3b:47:68:b0:f8:a1:f0:3e:5e:45:3d:d5:f0:47:73:4d:cc:
28:6e:61:c1:ef:f3:29:cc:3f:48:07:80:eb:78:1e:4b:7d:73:
94:cc:da:8a:f2:ef:d0:8f:1b:d8:4b:03:dc:13:e9:9f:68:f7:
e0:bc:36:d7:68:79:09:72:e9:cc:d8:ad:02:52:4c:d5:bc:29:
b7:f8:f2:a9:d8:51:a3:d7:4b:cd:82:56:fd:fc:0a:f7:03:9a:
92:1c:24:89:01:4b:85:0a:00:09:61:18:95:fb:cc:52:ef:c9:
5e:40:c9:76:5e:a5:3d:8d:bf:70:53:7e:5c:f8:ef:1f:10:c2:
0f:ac:42:6c:8f:f0:df:31:57:aa:7e:96:15:a2:84:41:9d:05:
b5:4a:5f:80:a7:4b:dd:24:b2:67:ca:03:78:c9:50:36:75:17:
55:f8:ae:4f:3e:eb:46:26:bf:d9:54:08:69:fe:60:33:fc:be:
75:0d:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:41:24 2025 by rpki-client