Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: 4Z6/bWCnrETPbabsv04HxuWai2TRgskD5ixoQSbrsos=
Subject key identifier: 4C:81:BF:25:9B:EA:71:EB:EC:FF:39:9B:F8:1B:0C:E3:98:6D:8B:F5
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019922FA05AB5C55A161A56A673427DDB421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1684
Signing time: Sun 07 Sep 2025 07:00:34 +0000
Manifest this update: Sun 07 Sep 2025 07:00:34 +0000
Manifest next update: Mon 08 Sep 2025 07:00:34 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: DKRBFMBZxt4CECI5R+MJx6yiUMAc4AdwZ9aYrhBsy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:05:ab:5c:55:a1:61:a5:6a:67:34:27:dd:b4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Sep 7 07:00:34 2025 GMT
Not After : Sep 8 07:00:34 2025 GMT
Subject: CN=4c81bf259bea71ebecff399bf81b0ce3986d8bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:fc:60:ff:e7:82:ed:f2:a8:3b:ad:a3:85:
b6:92:51:b7:2f:45:9e:a2:84:af:d6:cc:8e:2c:25:
38:29:16:b8:ec:3b:f6:64:b5:40:57:e5:17:56:39:
86:21:7d:98:52:37:8f:89:53:35:94:cd:64:0e:5e:
a0:b7:c9:82:31:ad:b0:bc:ca:9c:37:eb:55:ce:fc:
43:61:0e:5e:31:da:6f:80:b7:94:09:da:8a:fb:8b:
6e:ae:10:99:02:40:a3:3f:06:be:fb:cf:3e:d3:5c:
6d:ec:4c:fc:4f:c3:cd:90:ad:53:c7:70:9e:71:47:
6a:a3:ae:80:88:20:be:00:b3:57:4f:2c:42:5b:ff:
7f:c1:d0:ea:cd:36:24:a7:72:7c:a5:07:d5:2f:6e:
eb:01:9d:77:c8:ec:4f:7e:7b:bd:95:b2:31:9e:50:
00:19:27:c8:ff:02:5f:fb:1f:a4:45:e7:94:25:b2:
3c:32:82:9f:1d:74:a9:3e:e9:76:11:b8:12:1e:2f:
c7:1e:57:1e:46:42:9d:3e:4b:01:ac:e1:25:28:87:
6e:55:57:62:3a:bc:0b:a0:ef:0a:d5:49:0d:08:e8:
4b:09:4b:87:d3:25:f5:01:46:7b:2b:7a:15:4d:00:
67:5d:94:d9:04:a2:5e:0f:d1:57:27:a5:8c:04:ec:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:BF:25:9B:EA:71:EB:EC:FF:39:9B:F8:1B:0C:E3:98:6D:8B:F5
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:fe:61:ca:7e:1a:86:a9:3e:72:a1:4f:ae:72:06:e4:7a:
e8:f9:e8:fd:09:d6:40:6f:ea:15:f4:e7:1c:83:3b:4f:fb:c2:
b0:7b:58:73:9b:f0:4c:a6:ab:f7:54:36:9f:3e:f7:d0:c9:94:
ca:d8:f8:42:d4:c9:f6:a0:9a:c5:01:f4:d1:9b:6e:59:f6:28:
76:40:96:3f:aa:b0:f8:bb:7b:e6:b7:31:89:1d:08:28:20:fa:
3a:9e:7d:51:cd:d7:ac:6f:62:9f:71:ba:08:a9:d4:d0:32:c2:
8a:ec:4b:f0:83:e8:7d:5f:7c:d5:75:76:5e:1f:62:63:14:58:
3e:8b:01:bc:cb:86:13:a6:a7:fc:a9:97:b9:b0:30:24:93:a3:
b3:ae:3e:11:1f:01:ba:8c:47:d6:f2:a3:15:6d:5c:f4:3d:3d:
6f:9d:f6:6b:cc:91:c1:a7:00:d5:70:68:ba:da:0f:ab:6c:97:
58:cc:e5:8d:b1:3e:66:f7:fd:e7:3e:7f:bb:5d:72:d9:d9:d3:
a0:4b:d7:e3:39:60:7a:cf:be:de:74:41:1c:d3:fa:16:3d:4f:
ee:9f:b0:cd:76:13:fe:5e:84:ad:76:5c:5b:74:32:8a:06:c2:
0f:f5:a7:c1:5a:f6:73:d1:66:77:78:ad:9a:dd:06:cb:93:fa:
7e:94:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:38 2025 by rpki-client