Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: ns5+wHigdBqQDa4w4a9DJWg+17qC2hR9SALUTu2EkkE=
Subject key identifier: E9:46:7F:F3:1C:7E:40:3F:08:76:CA:7C:66:96:F5:C6:FD:6F:ED:03
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019894B7C18E652773FB0F78B258C1209187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 0EE3
Signing time: Sun 10 Aug 2025 16:02:07 +0000
Manifest this update: Sun 10 Aug 2025 16:02:07 +0000
Manifest next update: Mon 11 Aug 2025 16:02:07 +0000
Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: /xnVlMDmCJ8xkfeZ4KhNEpYLLkpw3tFIL1QU1M+Nk9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c1:8e:65:27:73:fb:0f:78:b2:58:c1:20:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Aug 10 16:02:07 2025 GMT
Not After : Aug 11 16:02:07 2025 GMT
Subject: CN=e9467ff31c7e403f0876ca7c6696f5c6fd6fed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:3e:d6:4a:99:a6:15:c0:28:d8:05:af:74:
49:c1:9a:a5:b1:6a:34:73:28:ea:9c:5d:ce:e2:13:
12:2f:36:a1:90:c2:1e:33:bc:28:3a:15:c9:d6:93:
b6:e2:a5:69:25:7d:bf:75:59:21:c3:cb:69:9b:e0:
bd:5b:00:21:88:b6:fc:4b:a4:49:46:9a:36:be:03:
fa:89:c5:68:27:af:d6:77:8d:43:bb:f7:7d:3e:29:
69:e5:71:e9:f6:98:c5:4d:99:bf:77:a6:38:ba:e3:
4f:f8:7a:66:d6:36:a9:c5:ae:91:82:64:a0:05:96:
c5:fd:ca:ac:89:ba:c4:1f:0e:97:20:48:e8:ec:f4:
0a:2a:5a:6a:fa:79:0a:0b:74:0f:54:9b:00:a3:a6:
3c:2e:91:ca:52:65:9a:4e:7e:e8:52:1c:e7:48:9a:
29:fd:da:b4:eb:35:d5:48:99:09:47:84:ec:1d:da:
0b:08:6a:2d:71:ed:56:6d:7f:60:bd:32:f3:90:96:
d8:4a:df:43:aa:6e:de:13:d5:93:84:8c:f5:2a:b7:
27:e6:5c:02:e6:54:4d:e7:04:26:52:d8:b1:d4:2f:
bc:29:ec:d7:fa:39:64:55:ab:2f:ee:c7:bc:76:0a:
f9:ad:11:93:62:47:2c:92:b2:2f:c9:63:bd:fd:da:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:7F:F3:1C:7E:40:3F:08:76:CA:7C:66:96:F5:C6:FD:6F:ED:03
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:c6:f7:f3:36:5c:e8:9e:17:96:a2:ee:e8:45:af:d1:bb:
17:27:48:d0:75:13:2b:ef:9a:ef:a7:97:ca:35:58:f4:16:c1:
0f:56:4e:18:60:c3:bb:c2:dc:52:7c:1d:56:ba:1a:ef:58:1b:
ad:d9:91:7d:a5:c8:55:9e:ac:21:f9:be:ff:5a:69:35:6e:a3:
0a:4f:f4:30:30:19:39:e3:13:4a:4a:cd:ed:68:d8:3c:ed:d3:
29:1d:af:75:e9:98:93:b1:0f:ca:3f:fc:2a:34:bf:c3:7e:43:
55:19:c7:db:ec:8f:84:53:cd:e8:ba:90:75:85:16:f8:78:c0:
47:f8:b7:90:eb:c4:f5:cc:31:ab:ec:09:cb:f7:41:ac:91:32:
fb:6d:10:26:10:cd:a5:77:e0:dc:e3:6d:23:89:d5:b7:1c:5d:
42:50:f2:0c:89:71:82:5c:1c:10:0d:02:a4:81:f2:c6:ac:ac:
7b:b7:94:cc:4c:ff:32:d4:11:7d:bd:3c:9e:19:91:83:68:cf:
6d:bb:ac:87:d2:11:55:38:42:90:5a:37:8b:1f:30:d1:6e:36:
e3:fa:0c:f5:0b:a2:5a:a6:43:ec:1b:93:97:d5:87:ba:92:64:
f6:d2:07:fb:66:83:72:aa:10:ea:d6:6e:7e:e3:77:25:9b:23:
4f:36:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:18 2025 by rpki-client