Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: RdWuQYvKX6uWSSboA+9Q9ptrqeN0Yn5TwEwpI7t8W4k=
Subject key identifier: DA:AD:8E:AD:5C:4D:03:24:21:40:DC:38:68:36:79:A0:A7:71:3F:D1
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0199315A888A1EAB419A78D48A8D4A23E69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0D32
Signing time: Wed 10 Sep 2025 02:00:40 +0000
Manifest this update: Wed 10 Sep 2025 02:00:40 +0000
Manifest next update: Thu 11 Sep 2025 02:00:40 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: DdlUBLGaGcb5ux5swR8bm37uCewR8iAGya7q+V5Em8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:88:8a:1e:ab:41:9a:78:d4:8a:8d:4a:23:e6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Sep 10 02:00:40 2025 GMT
Not After : Sep 11 02:00:40 2025 GMT
Subject: CN=daad8ead5c4d03242140dc38683679a0a7713fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:fc:17:40:33:f3:e3:2a:4d:37:e6:59:07:
f6:ac:ea:ec:c4:6b:4d:48:7c:78:fa:4e:cc:02:69:
40:1b:7f:d4:67:9f:80:9e:d4:51:2d:20:da:9b:f8:
28:25:40:b7:a5:e3:5d:7e:a1:24:38:14:0f:c4:2b:
ac:0e:23:65:50:4e:b8:8b:cc:ce:44:88:9a:52:74:
c7:70:d7:c0:83:32:31:a5:9d:3f:e5:e5:b8:df:94:
7f:25:2d:b7:f4:5b:4a:61:fe:9a:d2:3a:e4:d4:3a:
d7:c6:41:85:53:1b:d3:fe:74:6d:3e:60:2f:b2:29:
1c:57:58:d2:2b:4d:f5:ae:dd:4b:db:db:79:a2:fd:
7b:b6:17:74:43:46:ce:c8:69:8f:c0:5c:6d:a1:6d:
26:09:47:46:44:d1:e3:8d:e4:5f:22:93:17:88:80:
0c:b9:d1:3f:6f:e9:b5:7a:e8:b7:08:04:9c:f9:78:
95:ca:ae:2f:de:5f:c5:82:ef:b6:b8:0d:65:af:1e:
1b:b1:a7:0d:70:20:c6:9a:a3:12:78:55:c7:c1:dc:
3a:ee:82:cb:3b:40:0a:71:79:dd:ae:14:9d:2a:c5:
0b:5f:d7:e1:cf:27:52:71:89:b9:13:56:14:4c:a5:
8b:4b:ed:ad:09:a7:b5:f3:46:02:1f:3d:38:c6:7d:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:8E:AD:5C:4D:03:24:21:40:DC:38:68:36:79:A0:A7:71:3F:D1
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:09:4c:19:e5:09:83:db:61:4d:aa:40:ed:31:72:43:23:
b0:99:be:ee:f5:d2:39:3a:3e:0a:7f:5d:33:b9:7b:98:79:75:
ab:c8:ff:84:66:f5:84:3c:b4:1d:5e:96:cb:55:4c:10:26:97:
17:8b:ad:55:72:73:b6:98:de:35:3d:8f:af:02:f9:f8:0e:3b:
f9:dc:a3:ff:21:4d:f6:ee:96:30:63:02:95:db:14:26:8c:52:
cd:1b:f9:b1:43:ec:54:54:26:cb:a0:29:0d:02:4f:65:7f:c5:
07:5b:de:b6:0a:38:bf:f9:b2:e9:e3:bb:f2:e0:33:dd:03:68:
50:63:be:18:74:7c:aa:7d:f6:73:23:54:9c:96:13:25:b0:4f:
de:d9:48:46:45:26:a0:85:0b:03:70:6a:8b:2f:f3:da:29:3e:
80:c8:53:a5:ab:be:07:51:c5:e6:83:90:95:5c:e1:d6:98:88:
0b:af:45:da:9b:f5:5c:02:51:a4:0e:13:02:97:59:e4:b0:b0:
7e:8c:b8:e8:c1:78:21:6a:fc:08:30:34:04:85:dc:bf:db:aa:
9e:f0:fb:03:7a:f6:7d:9a:b6:5c:6c:3c:ee:8f:45:82:e1:86:
c0:bb:ba:19:ea:e1:83:cf:87:5f:19:be:92:89:c0:06:74:50:
9a:e2:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:58:04 2025 by rpki-client