Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: PIaXyEKY011hDqMaeap1Hr79XB8XLiqTItMuPsot8sA=
Subject key identifier: 99:C8:D7:7B:C6:75:61:64:AB:8A:69:97:6B:B4:8A:FB:C9:88:18:98
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019927B29B8B81047779AFAFEC98664EFB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 05:00:40 +0000
Manifest this update: Mon 08 Sep 2025 05:00:40 +0000
Manifest next update: Tue 09 Sep 2025 05:00:40 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: qco9FxB2DbXplZPxd4gU/sg4a+Guul4e9VlSOd8TOM0=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:9b:8b:81:04:77:79:af:af:ec:98:66:4e:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Sep 8 05:00:40 2025 GMT
Not After : Sep 9 05:00:40 2025 GMT
Subject: CN=99c8d77bc6756164ab8a69976bb48afbc9881898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:ef:c5:0b:f9:11:ee:f6:c2:40:5c:4a:dd:
8c:f0:71:a2:17:1b:94:f9:7a:23:e0:02:d1:8c:e2:
d7:55:69:29:5b:9d:7a:ea:5c:0b:c8:03:18:16:88:
3f:82:88:df:42:c6:c7:e7:5a:35:ac:4d:e4:dd:78:
ac:70:86:05:7a:22:f8:d2:b2:b9:da:89:fe:9a:8a:
07:85:4f:55:ec:71:b6:b6:d3:a1:4b:73:fe:d5:9e:
2b:74:63:90:30:78:1d:42:3b:c1:db:a8:4d:cd:e9:
eb:c5:26:1c:c8:c6:44:9a:09:94:51:b9:26:66:65:
32:d8:11:61:f8:e2:dd:3e:7b:94:65:f2:37:0f:06:
8a:8f:24:0c:20:74:39:b0:5d:eb:5e:f9:d0:f7:e0:
09:27:02:8b:bd:68:0c:35:38:ee:52:c1:41:8e:e3:
83:31:54:5c:d5:59:d0:a4:df:fd:86:16:e6:71:88:
32:79:c8:25:e4:d5:e6:1c:0b:9f:0c:43:7c:7c:3d:
03:61:d4:ab:0b:89:f5:d7:79:53:22:4d:98:7b:77:
98:08:b1:1b:c7:a2:96:2b:5d:51:98:a5:cd:ef:49:
93:ed:56:44:48:2a:4f:1e:ca:ec:25:36:88:d5:94:
8d:62:10:3e:10:50:e6:ca:bd:48:ca:e5:aa:2a:dd:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:D7:7B:C6:75:61:64:AB:8A:69:97:6B:B4:8A:FB:C9:88:18:98
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:02:48:e9:0f:f9:f5:8e:5c:80:e9:b9:57:52:89:b5:36:
e4:0b:83:a9:c7:c4:14:f4:c0:bc:60:8c:84:75:db:3d:7c:a9:
26:a7:7f:cc:db:aa:a0:85:d5:e8:d6:30:cb:90:ec:5e:97:45:
61:bc:b1:2d:2a:15:1b:37:2f:5c:28:93:a1:79:d9:67:1c:53:
e0:4c:e7:44:ee:5c:c0:31:41:09:fe:02:25:27:ed:1a:1b:ad:
74:21:e0:4a:30:b3:cd:80:ad:08:4e:56:5a:db:cc:fe:b0:84:
f8:fb:a7:f4:79:37:88:f1:84:9a:4d:94:cb:4a:5d:25:5d:3d:
bb:7e:03:14:62:3c:b1:83:1a:c7:e9:a2:d0:f4:ca:46:ae:d8:
83:73:4d:29:69:38:a2:ac:cc:85:2e:60:cf:13:3e:38:7e:8e:
ac:19:04:ba:f5:16:8f:e2:db:31:e1:0e:20:01:af:c4:dc:38:
08:65:47:7f:e1:ea:82:df:c9:c0:16:0b:37:c7:ae:4d:b1:ab:
53:dd:4c:53:07:93:1e:9b:7b:d5:f7:5d:de:10:30:05:ae:b2:
35:62:c7:a2:fc:36:e4:46:96:7d:d2:c8:ed:47:3f:d0:fd:fa:
7e:d3:b7:15:57:7a:a2:a5:a4:3a:d4:f1:44:56:9a:5d:b1:e5:
7c:21:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:47:22 2025 by rpki-client