Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: SdKZA0I5Lx02w1CWZtTto9XU+RWidLjUsji7sgV9Cb4=
Subject key identifier: 41:B1:33:EA:E9:8D:58:EF:89:B9:D8:F6:0E:58:7D:2D:70:B2:8A:A6
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019938DEB28E9E54ACA8559EA6A52EB619A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 13:02:22 +0000
Manifest this update: Thu 11 Sep 2025 13:02:22 +0000
Manifest next update: Fri 12 Sep 2025 13:02:22 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: EfWE0fxnjIbJbcr1hNVglKUUSjSmA63I1OVrn08TLiE=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:b2:8e:9e:54:ac:a8:55:9e:a6:a5:2e:b6:19:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Sep 11 13:02:22 2025 GMT
Not After : Sep 12 13:02:22 2025 GMT
Subject: CN=41b133eae98d58ef89b9d8f60e587d2d70b28aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:c6:6e:5f:1f:f0:bd:b5:3e:c5:6a:ba:8a:
eb:73:1c:38:7e:71:cb:f1:da:30:06:04:51:90:46:
02:f5:57:0e:5f:48:82:2b:3b:08:24:7e:a3:b1:d6:
7e:2c:89:5a:93:c4:e8:9e:77:31:54:5d:66:39:de:
be:35:7c:f4:e0:4d:ec:3c:35:65:f8:e1:ff:c9:f9:
78:ee:52:6a:23:39:0d:b9:52:59:b6:e2:88:da:61:
12:0e:47:7a:3b:ba:28:ac:f4:13:49:ff:47:13:ff:
27:1b:43:31:5d:3a:53:e5:e9:55:d2:3b:7c:82:7b:
65:b2:29:16:83:3b:9e:1f:8b:39:3e:e0:94:7b:e5:
af:a6:14:77:6c:eb:e7:27:79:8a:cc:b2:4e:a7:aa:
f8:01:f5:c5:49:fb:cb:1b:d1:02:a5:bf:47:9c:01:
03:b1:09:57:8b:6f:0d:8d:58:bb:02:33:c0:1c:18:
1a:c0:26:53:9c:a3:3b:e5:85:df:4e:48:3e:92:e3:
a8:27:73:f3:fb:e7:19:5c:49:5d:2d:ce:35:b2:94:
fd:a8:22:5a:f0:1e:ea:96:cb:ee:08:1d:c2:fa:30:
bd:62:de:1e:63:b6:c3:0e:96:79:3f:f6:4c:29:1d:
dd:39:ae:b4:f0:a6:0e:7b:67:f4:09:46:bf:79:0d:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:33:EA:E9:8D:58:EF:89:B9:D8:F6:0E:58:7D:2D:70:B2:8A:A6
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:6d:f1:11:f9:cc:55:a8:c9:d1:77:b8:d0:ad:31:a8:39:
57:aa:72:06:2a:e4:5e:47:af:ef:8b:17:18:f9:da:c4:1a:9e:
15:50:9c:13:f4:3d:a9:a2:41:65:04:6d:75:04:a2:4c:4a:c8:
b6:74:cb:8d:2b:a4:d0:d2:6d:83:6d:57:22:b3:59:c4:06:53:
16:e8:f6:8c:b4:02:70:77:a4:b3:fa:a3:1e:77:84:a5:21:91:
50:c4:fd:ab:a9:80:3c:0d:72:8a:ad:b9:78:71:73:16:bb:9d:
54:a4:40:98:49:17:01:87:f5:ad:d1:db:c6:33:d5:8b:23:f1:
b9:19:b8:19:93:6a:c3:3c:93:9f:aa:5f:1d:9d:b0:24:59:85:
98:a3:75:ca:51:5f:07:ab:37:77:d7:7a:dc:21:35:46:7b:72:
3d:c7:64:7b:23:f4:fa:d7:48:8f:01:29:77:74:0c:07:6a:be:
51:ce:d8:f1:a5:40:f6:ad:2a:3b:e8:a6:12:fe:42:5b:9c:0f:
34:fe:1f:21:8c:f9:bb:f3:ae:b3:ab:6e:31:7d:4c:5d:cc:7a:
a4:e8:73:b9:bf:2a:c9:04:cd:d0:aa:e0:75:9d:97:52:fc:f6:
7d:7c:37:a2:dd:40:98:77:f5:da:61:06:e0:d8:4c:81:59:d2:
38:b9:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:33:39 2025 by rpki-client