Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File: uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier: tt3csv0U6emrIOpFsPHn+NBxdvNPE60Qo34x7Y2ADi4=
Subject key identifier: 89:BE:E0:73:10:3F:67:B9:13:55:90:3E:9B:E2:34:9E:16:E8:CA:0A
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 01987AF6B06A69DFF947478C92304384A00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number: 10D2
Signing time: Tue 05 Aug 2025 16:00:44 +0000
Manifest this update: Tue 05 Aug 2025 16:00:44 +0000
Manifest next update: Wed 06 Aug 2025 16:00:44 +0000
Files and hashes: 1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: uwfghpekR2+nL3qE9yPch/aRPg97pXKN55PVOyEFiPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:b0:6a:69:df:f9:47:47:8c:92:30:43:84:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Aug 5 16:00:44 2025 GMT
Not After : Aug 6 16:00:44 2025 GMT
Subject: CN=89bee073103f67b91355903e9be2349e16e8ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:30:31:ab:dd:0d:84:d9:42:7c:a9:36:6a:
bc:c1:58:de:f0:22:68:52:fe:19:72:57:bd:c6:69:
c9:ed:30:8a:ab:53:a4:9d:c6:57:c6:3e:17:41:71:
bd:a3:69:51:bc:65:8f:60:de:83:d7:35:8f:a2:fb:
71:72:9e:94:c7:a7:72:7c:df:2d:4f:b7:32:81:ad:
d1:0f:89:e6:67:cd:e6:5f:b5:7e:b3:4b:d0:96:ee:
41:18:4d:65:3f:85:95:e2:a9:db:4a:ae:df:bc:89:
69:07:a4:64:16:c4:3d:5b:bf:95:9e:5c:e8:88:e1:
15:72:4a:ba:9f:8b:98:62:6c:b5:0a:25:65:98:6f:
e2:bd:21:45:96:da:11:75:18:bf:82:ce:25:10:6c:
3c:67:fa:0e:4e:72:f6:17:e6:e8:24:21:78:bd:96:
9e:3a:07:7b:e7:4a:eb:b2:99:35:f8:72:b3:10:e2:
1f:46:b3:fa:97:fc:40:90:0f:0b:7d:b9:13:69:83:
44:90:54:1d:3c:8d:33:ae:07:8c:cd:af:2d:d5:eb:
c9:a8:46:6b:17:4e:a3:52:81:fa:df:e0:4c:a6:70:
fd:36:6b:7d:99:3b:e6:b5:d4:9d:f8:23:d0:4b:cc:
28:ed:41:df:93:1c:85:6a:42:f4:49:eb:46:5f:47:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:E0:73:10:3F:67:B9:13:55:90:3E:9B:E2:34:9E:16:E8:CA:0A
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:5f:7e:21:56:4d:0d:9f:06:0e:ce:9a:47:93:5a:d0:1d:
a3:7b:f4:f7:9b:9c:a6:b0:ee:cd:7b:a8:63:8f:79:cb:c4:53:
c5:0a:c3:e0:db:78:42:ba:0d:7d:25:ab:3d:46:31:20:69:ec:
d0:1d:24:f1:57:da:5e:2e:36:11:37:73:4c:be:c4:f9:8b:0f:
16:38:3b:0c:02:dc:fc:40:d6:c0:3f:a1:ca:f6:cd:f1:1a:31:
da:98:48:8d:48:e1:16:76:ff:d6:db:a5:82:bd:cc:ff:b5:98:
81:e4:7e:db:ff:c5:01:0c:f6:5d:f6:f2:bf:41:03:b6:d7:72:
7c:33:c1:fb:c4:3b:a6:52:40:6b:a7:0d:94:e8:7e:3c:3d:63:
b3:ac:66:4c:84:05:0f:82:2e:cd:95:e2:f3:61:9c:b5:16:36:
7c:06:34:f2:83:b1:40:a1:69:5d:b9:3f:00:63:e6:57:e6:c0:
85:d8:31:03:86:21:5a:d1:bf:ef:ac:c1:ed:fe:96:d8:5f:10:
e1:f2:73:99:60:15:28:8c:b3:49:c1:19:9b:9f:42:bb:8a:46:
c3:52:cb:f0:08:df:cf:42:c1:a5:34:39:79:63:6f:b6:fc:fc:
b6:9d:08:bf:d7:a0:d1:67:ae:5c:bf:5b:67:ad:40:a4:9b:00:
be:d9:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:58 2025 by rpki-client