Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: BussiKxcTBXD7MMxuFiWViEXkxGp75lfW4/OaaQoFNs=
Subject key identifier: 16:4B:99:C3:2A:83:D4:36:B1:3A:AA:A5:34:93:E2:3E:F3:C7:9A:93
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 019927E997CD0A9DD45479F82E57B2292A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 0667
Signing time: Mon 08 Sep 2025 06:00:43 +0000
Manifest this update: Mon 08 Sep 2025 06:00:43 +0000
Manifest next update: Tue 09 Sep 2025 06:00:43 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: ZuOW3i4ucSN1/MxANftnlz/yLB72dHypB/UGgILC+U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:97:cd:0a:9d:d4:54:79:f8:2e:57:b2:29:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Sep 8 06:00:43 2025 GMT
Not After : Sep 9 06:00:43 2025 GMT
Subject: CN=164b99c32a83d436b13aaaa53493e23ef3c79a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:53:b6:36:6c:ef:f0:a7:45:b5:3b:9a:74:
fe:d3:ce:00:01:cf:fe:b8:94:f2:4b:46:5c:70:c5:
b5:35:6a:62:55:00:9b:77:c1:d0:8d:0a:27:e3:8a:
83:50:ac:16:8e:a7:a6:5d:b2:a5:ca:8c:e6:7a:2d:
9c:f4:b1:88:37:a8:0e:1f:5e:21:35:5e:97:29:9c:
70:69:6c:51:c5:52:d4:66:65:3f:c5:4d:d0:4e:55:
42:32:c1:fa:08:d0:08:9c:05:f9:41:9b:64:a6:61:
2a:c7:75:47:87:0e:ef:33:93:b8:e3:2c:53:dd:51:
f0:19:bd:9f:56:f7:5f:24:1c:28:d7:04:b0:7f:54:
d0:5f:71:26:67:54:f4:f6:16:b9:b4:91:1d:f9:99:
f4:76:dd:a6:c2:d3:dc:9b:37:6e:14:c0:f5:aa:02:
81:5b:7f:07:ab:81:12:ac:b1:60:14:33:4b:5b:e9:
45:40:b0:b6:28:de:fe:06:fa:6b:47:11:e5:a7:ef:
1d:bb:b8:88:36:7c:62:93:7e:97:6e:93:35:e6:cf:
36:92:5c:3d:5a:ee:61:da:fb:33:0f:06:b0:b9:ba:
aa:a0:60:aa:76:bf:a7:5b:5b:74:18:3a:ac:95:ca:
7b:db:34:72:20:5b:af:0b:ac:a3:b3:52:d6:13:b3:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:99:C3:2A:83:D4:36:B1:3A:AA:A5:34:93:E2:3E:F3:C7:9A:93
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:05:7b:74:cb:f4:32:74:b5:2a:e1:ab:e5:34:36:d2:be:
6b:c3:5b:6a:e3:07:b2:d7:5f:05:82:eb:01:d7:5f:9f:4d:f3:
4f:26:dd:4b:61:b8:eb:83:02:c7:14:22:bf:d4:b3:ef:38:ee:
b5:68:21:c9:84:80:72:06:4a:9e:37:3e:1d:69:77:fb:32:44:
6b:e8:b8:b1:c3:ea:2d:74:ae:5f:76:a7:00:2e:da:0a:8a:a5:
73:f5:7f:bc:bf:0a:8d:cd:2c:aa:11:5d:34:21:c8:bf:0a:46:
bc:17:76:a6:d5:44:97:5c:69:a1:3b:5c:df:11:0d:6d:a6:0d:
89:42:66:31:84:ec:93:13:33:47:5d:77:cb:ee:f8:e7:72:db:
4f:b7:87:8f:be:a4:64:ff:2f:c0:2b:23:d8:c0:6d:7e:25:f8:
fc:59:70:fa:ec:a5:92:81:de:4c:a6:ba:2c:79:93:ca:29:0b:
0c:6f:1e:46:b1:e5:cf:e8:b0:8b:1f:c3:c4:46:df:cf:54:ea:
6b:84:f1:6b:19:6f:86:6d:ce:90:aa:ee:80:42:4c:24:7a:7f:
07:8b:77:d7:85:d9:f0:3a:ef:18:a8:a5:f3:d5:c5:c5:3d:e4:
40:65:b6:cc:ea:f6:0e:d0:99:81:40:d7:b4:eb:3a:77:4a:f5:
fd:de:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:33:55 2025 by rpki-client