Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: Tu79Xaef0P6V8qCgVmVPN5rmQ/d3cW05Y+Ii5KzTwY4=
Subject key identifier: 30:54:56:65:F2:85:29:A5:D2:24:75:BD:20:5B:C9:BF:48:F6:A7:2D
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 01993010F19749B89DA88AB8BC6FA5AD99D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0A50
Signing time: Tue 09 Sep 2025 20:00:40 +0000
Manifest this update: Tue 09 Sep 2025 20:00:40 +0000
Manifest next update: Wed 10 Sep 2025 20:00:40 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: /Tq1PXgzbJxTtpF9FX/HrZK0QzjFjd27Tmk45Mis5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:10:f1:97:49:b8:9d:a8:8a:b8:bc:6f:a5:ad:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Sep 9 20:00:40 2025 GMT
Not After : Sep 10 20:00:40 2025 GMT
Subject: CN=30545665f28529a5d22475bd205bc9bf48f6a72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:a0:92:92:e4:ce:e7:6a:86:92:4e:88:03:
93:a5:26:16:0b:e6:94:e2:0e:99:8c:07:71:ee:09:
88:13:88:0c:f4:ad:8d:36:29:b7:e9:5f:82:77:8f:
e1:9a:00:4c:1a:65:ce:df:34:07:71:aa:ca:6a:9a:
2e:b4:ad:12:3b:8c:f9:7b:b6:b2:0d:ff:24:4e:c1:
61:de:1a:82:68:a3:85:05:bf:31:2c:56:2f:4a:a6:
8b:70:b7:88:fa:e8:91:0a:ac:f2:8b:aa:cc:c7:20:
67:3d:8b:c5:a7:f9:77:7c:0e:eb:90:e6:81:3c:f6:
22:31:63:c1:7e:76:25:d9:ff:ef:a6:25:b6:c3:9e:
fe:83:e4:46:90:cd:e0:c8:c2:51:c8:d6:21:1b:19:
4f:e6:e3:44:2a:ef:2f:21:19:86:0b:f1:77:1e:b5:
38:b0:6c:1e:23:66:a2:e9:e2:41:d2:35:b8:fe:c6:
8d:d2:c6:1c:3e:34:38:99:9c:b2:1a:a4:91:bb:af:
a2:91:b6:f4:26:d7:8d:3d:04:95:27:e5:3c:b4:bb:
89:65:a5:44:f4:f0:a4:58:a9:e6:8b:c2:61:bc:30:
1b:10:c5:53:01:14:03:39:cd:77:af:4f:3e:8d:8b:
6a:c5:12:47:78:be:10:7d:01:0b:b1:51:2e:00:20:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:56:65:F2:85:29:A5:D2:24:75:BD:20:5B:C9:BF:48:F6:A7:2D
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:57:de:99:06:6c:c2:28:99:61:e1:ee:ef:42:76:5a:40:6f:
54:f1:a0:bc:ba:a7:5c:1b:31:6f:6d:36:1b:76:74:1a:8c:76:
a8:e7:da:2e:e6:20:2b:bb:fb:36:45:e9:0e:d0:81:34:a2:d4:
24:d9:ac:7e:f4:19:66:67:1f:4e:0a:8d:6c:76:3d:c9:0e:d7:
48:e2:f4:bc:9d:a1:24:04:00:8f:67:10:d5:36:3a:5c:06:b7:
3a:68:35:77:54:e8:8a:60:2a:f6:1b:c6:9f:3b:10:e2:1b:2f:
47:d9:e3:2b:8d:f9:85:cf:38:52:75:84:27:d1:3a:3d:91:16:
77:74:83:10:5c:34:45:f8:5d:9b:1b:62:c3:87:5e:ce:6a:43:
d7:8c:f0:32:f0:20:70:01:c3:6e:4a:c5:35:20:7d:52:b8:79:
79:55:8a:4d:51:8b:e0:ec:a7:37:36:f7:cc:5e:20:e2:a1:fc:
bb:6d:ff:98:ca:72:c9:a3:0f:e9:b7:91:ec:21:0d:43:9a:83:
2a:98:6b:47:84:c4:ff:b2:87:47:ca:c1:5e:d7:b9:42:31:1f:
ee:f9:e0:0a:70:27:b7:2d:e8:8d:39:9f:4e:2d:49:6f:4a:4d:
19:6c:31:21:eb:c2:de:9d:16:ea:b4:d3:83:c4:eb:33:a5:fd:
c0:d7:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:36:47 2025 by rpki-client