Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: udE88gfz4yH5mA04cwI9MOhnVpEHR1nBK9hTYn+9BXs=
Subject key identifier: A4:E3:4E:D0:F6:E1:29:FD:60:B8:27:2C:88:FD:7A:B6:05:1A:12:94
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 0199228D1D3B7E00FE91FC46FCF369BDAD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 0114
Signing time: Sun 07 Sep 2025 05:01:37 +0000
Manifest this update: Sun 07 Sep 2025 05:01:37 +0000
Manifest next update: Mon 08 Sep 2025 05:01:37 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: UiHS3CJx9K6+kav8yv72P6/sPfR3fdxRvBJlwErjhKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1d:3b:7e:00:fe:91:fc:46:fc:f3:69:bd:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Sep 7 05:01:37 2025 GMT
Not After : Sep 8 05:01:37 2025 GMT
Subject: CN=a4e34ed0f6e129fd60b8272c88fd7ab6051a1294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:bf:0c:c9:3d:d0:64:99:fe:8d:9e:32:9e:
29:07:de:59:4e:7f:2d:34:a6:a0:06:7b:e4:bd:c4:
36:59:f6:f6:da:22:3b:03:94:b4:52:4f:6a:10:79:
c0:68:7b:97:17:46:ad:e0:6f:7f:35:20:c6:02:cc:
3f:b6:b6:a8:ac:13:b7:1f:52:15:1f:6a:55:23:69:
0c:3a:3e:4c:a5:23:b4:92:3d:ce:44:90:4b:ed:e0:
88:82:3a:f9:25:ec:b5:42:12:91:bb:f2:69:41:84:
f6:96:1c:cf:60:ac:ac:75:f0:1b:ca:ee:e9:eb:b6:
c9:d7:5f:1c:2d:ea:3b:ed:03:d9:c2:9e:d8:98:7c:
06:dc:6e:3f:a5:c5:2b:4a:c4:96:0e:8a:aa:1d:c2:
69:8e:1c:97:5a:07:b8:ce:c8:d1:5f:3a:e3:38:c7:
1f:db:b0:e9:60:12:1c:46:1e:ac:3e:5e:2b:59:ab:
0d:58:e5:6d:d7:3c:6e:40:b7:36:14:fa:39:02:ae:
50:c5:c6:48:6c:ea:80:15:5e:27:1f:2a:df:1d:e6:
67:12:aa:1e:61:85:47:44:00:8f:65:58:84:9c:b1:
e5:84:36:ac:79:a2:d7:66:dc:e1:ca:1f:25:62:ba:
c6:73:14:74:3a:38:0b:d5:d7:62:c7:3a:b8:64:32:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:4E:D0:F6:E1:29:FD:60:B8:27:2C:88:FD:7A:B6:05:1A:12:94
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:64:92:fd:ac:aa:da:19:4c:9c:59:79:3e:8b:e4:a3:3d:0c:
c9:3d:dd:78:2b:20:0e:09:a7:14:11:35:a4:17:2b:06:9e:af:
1b:3a:1b:46:9e:a1:23:74:18:14:c8:be:ff:a4:c3:db:1c:eb:
b2:c5:db:e9:6a:a2:4f:3c:8c:0b:fa:4d:9d:1e:d8:47:cf:98:
66:58:98:c7:e8:f5:9e:82:69:6c:d9:68:02:e2:99:fb:81:cb:
87:25:35:84:eb:ae:c8:d4:e2:65:00:92:6d:e1:fe:c2:85:3e:
80:38:1a:66:a7:2f:57:0d:6b:77:04:59:3f:cc:39:8f:68:4b:
71:4f:5e:ba:a5:0b:fc:00:c1:76:5e:4c:1f:d8:3f:66:ce:4a:
88:07:cb:e3:6d:1f:3f:dc:b4:ea:07:40:58:91:99:e9:21:5e:
f5:4f:00:41:4b:12:cb:42:50:43:ea:23:12:c2:17:cf:17:7c:
80:d8:12:fd:7c:6c:91:fd:d2:48:b5:8c:57:75:8f:45:ff:5a:
30:2d:66:8d:ee:f6:a6:a2:0f:9b:5c:bc:65:e6:d7:72:c7:1f:
1d:80:c1:12:ac:4f:0a:d8:ce:62:75:3b:f8:0b:64:92:f3:03:
52:0e:66:a7:25:46:3c:a4:92:92:6c:21:21:fb:32:da:01:8d:
65:e4:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client