Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: 5VmLaW00IcQs3YYR3FoDZPyTCzvHwLkGU1/DqTwF7Ls=
Subject key identifier: A9:14:6E:C1:07:9A:9D:94:FB:C4:29:BC:06:D0:58:C3:89:3C:13:CA
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019918097B964B7E57E97C98A8839C928848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1675
Signing time: Fri 05 Sep 2025 04:01:38 +0000
Manifest this update: Fri 05 Sep 2025 04:01:38 +0000
Manifest next update: Sat 06 Sep 2025 04:01:38 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: quVuYxDJWDpax3soqi8aEJTNkjUXmmOCy9gXaYCbcDs=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:7b:96:4b:7e:57:e9:7c:98:a8:83:9c:92:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Sep 5 04:01:38 2025 GMT
Not After : Sep 6 04:01:38 2025 GMT
Subject: CN=a9146ec1079a9d94fbc429bc06d058c3893c13ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:ce:24:10:95:31:92:e0:c5:96:9f:84:4c:
73:17:6a:98:de:07:2e:ea:8a:94:34:45:3e:5b:ee:
a8:1a:6d:6f:ec:13:9a:a5:3b:64:02:11:ad:2e:ed:
8e:71:2d:6e:86:00:11:d8:6b:9d:b3:eb:98:d9:13:
93:b5:41:3e:f5:27:93:d7:7f:bc:9f:66:74:50:6d:
f8:c3:9a:78:2f:12:10:2a:12:9f:c0:cf:4c:46:36:
00:fa:77:1a:29:3e:59:55:7b:b7:91:3f:dc:fb:9f:
80:8c:de:7d:33:54:dc:b5:f2:4f:e2:8f:08:10:2d:
a1:fa:be:c0:70:4f:74:6a:34:89:4e:01:ec:52:9b:
c5:f3:37:cb:7a:2d:03:ab:36:a6:52:87:b7:69:17:
4f:7d:7b:fa:ec:a6:54:0e:b2:40:57:08:da:86:b8:
c5:75:d0:6c:36:11:6e:c2:a1:d4:21:c9:bc:6e:75:
2a:e2:40:11:aa:9c:72:fb:f4:f6:6d:e9:55:c1:53:
a2:ae:d2:68:df:f1:3d:06:7c:40:34:45:c1:ea:9a:
d4:a4:6c:3c:8c:7f:8c:0d:25:19:a1:43:eb:40:fe:
60:8c:c8:1a:8d:b2:71:64:c5:65:b0:f0:97:31:9a:
3b:aa:2d:0a:90:35:64:3f:6f:5b:88:ec:ba:8b:fc:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:14:6E:C1:07:9A:9D:94:FB:C4:29:BC:06:D0:58:C3:89:3C:13:CA
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:3f:01:6d:d1:8c:1d:68:31:69:2e:f4:4d:fa:4f:ba:0f:
22:3d:b4:21:ad:dc:3b:b3:d3:ff:05:b9:66:31:6a:03:5f:ae:
1d:01:cc:55:01:94:9a:95:2d:99:65:49:96:13:99:69:e7:2a:
52:30:40:1e:4b:27:57:4f:fd:dd:88:bc:54:5e:5d:b5:4c:8f:
ff:e7:52:f5:f8:72:69:e4:c4:e6:5e:22:11:0d:23:9b:d9:74:
f7:a7:1f:bf:31:ac:a7:02:a0:12:11:a0:e5:4f:76:20:f9:dc:
4e:8d:f5:37:6a:a8:10:fe:86:a4:c1:dc:fc:6a:b8:f2:f8:09:
85:69:3a:d7:32:d3:09:a2:e1:9e:66:22:c8:52:80:c9:06:5f:
85:c3:b2:8a:15:7e:e4:e6:d0:da:16:3f:47:36:16:85:53:20:
e3:e0:0f:b8:ca:44:7e:64:88:6f:f1:11:a3:0d:ee:40:0b:fa:
3b:1e:84:fe:68:1c:39:41:0b:b2:d3:fd:6a:fd:54:66:75:a8:
e6:1f:11:ba:c1:98:9e:01:64:4d:8c:82:88:8b:4e:d8:1a:7c:
ec:60:27:f1:3c:3f:1a:36:4f:4b:45:d2:d3:4c:cf:e2:ad:a6:
01:a2:28:c9:a0:5f:52:07:c3:7d:71:18:c9:3c:c0:c0:a2:d9:
39:5c:fd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCXuWS35X6XyYqIOckohIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjUwOTA1MDQwMTM4WhcNMjUwOTA2MDQwMTM4WjAzMTEwLwYDVQQD
EyhhOTE0NmVjMTA3OWE5ZDk0ZmJjNDI5YmMwNmQwNThjMzg5M2MxM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz03OJBCVMZLgxZafhExzF2qY3gcu
6oqUNEU+W+6oGm1v7BOapTtkAhGtLu2OcS1uhgAR2Guds+uY2ROTtUE+9SeT13+8
n2Z0UG34w5p4LxIQKhKfwM9MRjYA+ncaKT5ZVXu3kT/c+5+AjN59M1TctfJP4o8I
EC2h+r7AcE90ajSJTgHsUpvF8zfLei0DqzamUoe3aRdPfXv67KZUDrJAVwjahrjF
ddBsNhFuwqHUIcm8bnUq4kARqpxy+/T2belVwVOirtJo3/E9BnxANEXB6prUpGw8
jH+MDSUZoUPrQP5gjMgajbJxZMVlsPCXMZo7qi0KkDVkP29biOy6i/wPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkUbsEHmp2U+8QpvAbQWMOJPBPKMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltM/AW3R
jB1oMWku9E36T7oPIj20Ia3cO7PT/wW5ZjFqA1+uHQHMVQGUmpUtmWVJlhOZaecq
UjBAHksnV0/93Yi8VF5dtUyP/+dS9fhyaeTE5l4iEQ0jm9l096cfvzGspwKgEhGg
5U92IPncTo31N2qoEP6GpMHc/Gq48vgJhWk61zLTCaLhnmYiyFKAyQZfhcOyihV+
5ObQ2hY/RzYWhVMg4+APuMpEfmSIb/ERow3uQAv6Ox6E/mgcOUELstP9av1UZnWo
5h8RusGYngFkTYyCiItO2Bp87GAn8Tw/GjZPS0XS00zP4q2mAaIoyaBfUgfDfXEY
yTzAwKLZOVz9WQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:29 2025 by rpki-client