Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: 3d57J13RU1Ud5OOUB7YANrn5mNu9pMmD/GrGSD7q0pU=
Subject key identifier: 09:21:39:F5:BC:24:5E:08:19:A2:14:26:02:80:82:EB:1B:16:54:F9
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0199361346B81364A664CD0EE6DC0D03F788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0D0B
Signing time: Thu 11 Sep 2025 00:00:56 +0000
Manifest this update: Thu 11 Sep 2025 00:00:56 +0000
Manifest next update: Fri 12 Sep 2025 00:00:56 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: DuJXdzYFQtp61/EbywkoOoegZ68FCzKBoo12jxrRyDg=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:46:b8:13:64:a6:64:cd:0e:e6:dc:0d:03:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Sep 11 00:00:56 2025 GMT
Not After : Sep 12 00:00:56 2025 GMT
Subject: CN=092139f5bc245e0819a21426028082eb1b1654f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:cb:a8:ce:b7:4b:2a:b3:bc:90:c6:6b:59:
29:fe:09:da:3e:99:ec:4e:7a:b8:d3:6b:b9:12:b6:
1b:77:53:70:81:02:d3:31:5b:3c:ec:ae:fb:37:f9:
a0:d6:e0:ca:aa:71:57:db:91:be:75:0c:7f:9e:e5:
83:8b:50:9e:04:27:c6:d6:4b:8b:27:10:c3:9e:e7:
3f:1b:74:3e:e8:01:89:cd:4b:fa:14:bc:35:f0:38:
be:e5:13:02:9e:32:72:c8:6a:f9:b6:95:5c:88:c3:
25:da:84:53:12:1a:32:69:8e:d9:26:8d:77:f8:86:
17:75:4c:e8:d1:5e:cc:4e:02:d8:2e:9d:fb:cc:c9:
c3:f4:59:4a:26:0d:02:0d:24:77:e0:d8:48:0e:62:
8e:f6:dc:95:82:59:f9:35:7e:9d:d0:98:4d:a9:3f:
e2:6e:6f:d9:04:fc:4b:41:f2:76:3a:85:8e:fc:66:
2a:9b:1b:4a:a5:d1:c3:e1:68:12:df:5c:40:4c:c7:
d1:42:d9:66:66:cd:66:88:f9:c3:61:36:00:9f:06:
78:22:17:74:2b:65:1a:b0:92:3d:ff:e5:a4:fb:b1:
e0:8d:74:81:17:38:b7:27:43:78:3a:c8:d1:c2:e7:
90:96:86:49:69:b3:65:ce:5a:cf:86:3b:56:e2:0a:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:39:F5:BC:24:5E:08:19:A2:14:26:02:80:82:EB:1B:16:54:F9
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6f:b2:cc:2a:90:87:fb:65:0f:92:57:86:38:36:00:3a:d9:
af:88:38:b4:99:77:f8:87:f8:0b:97:7e:4b:88:69:88:0c:4d:
76:58:fb:28:c5:cd:df:fa:f7:47:a6:37:e8:c1:54:30:9d:37:
5d:0a:b2:69:5d:9a:49:eb:b3:40:9a:9b:32:1e:e2:aa:1e:d8:
46:a0:cf:72:0d:3d:79:04:27:56:30:d8:6c:92:1d:5a:58:95:
f6:95:c3:c6:ed:19:e3:d0:f1:ba:eb:df:02:d1:63:64:5b:37:
e3:3c:f1:a9:dd:c8:ca:50:a8:3d:9b:92:d0:30:f5:d3:a2:30:
e7:76:c1:9f:01:85:e0:19:3f:72:58:64:79:74:83:d6:b5:f3:
3d:d9:6c:7f:0e:cb:6c:7a:95:8b:a1:4a:c3:79:5b:2b:84:e1:
26:cd:f9:2d:22:67:19:eb:26:dc:19:9b:bd:f5:53:a5:7a:85:
fe:61:5f:b0:74:c8:82:25:cb:d1:53:5f:69:8f:fd:ca:da:8b:
36:35:84:ab:14:9f:4a:03:f5:08:7d:f1:ee:3c:df:b1:14:eb:
53:78:3b:9d:86:dc:7a:68:55:d6:3d:3e:1b:a5:86:0e:eb:03:
78:49:8b:d3:f2:72:3c:2d:6e:ba:ee:46:f9:f5:5f:6c:11:e2:
ab:46:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:42:46 2025 by rpki-client