Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier: MGBb2ywcavHRcYyUSoKLVIJjtjUm7GzVUPnHSBcx05U=
Subject key identifier: 08:90:0E:B5:52:ED:EA:C3:5F:57:F0:98:DC:F8:21:73:5B:FA:51:97
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial: 01989780531DE877F9EBEA2F9DDE82A65EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:00:26 +0000
Manifest this update: Mon 11 Aug 2025 05:00:26 +0000
Manifest next update: Tue 12 Aug 2025 05:00:26 +0000
Files and hashes: 1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: 0CNN86CzKq+hSFK8CAi1Ydl0hiBcxXxKSJ74rHcVpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:53:1d:e8:77:f9:eb:ea:2f:9d:de:82:a6:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Validity
Not Before: Aug 11 05:00:26 2025 GMT
Not After : Aug 12 05:00:26 2025 GMT
Subject: CN=08900eb552edeac35f57f098dcf821735bfa5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:20:cb:73:14:f3:61:d4:8c:65:f6:01:e5:b6:
69:e5:58:d4:01:55:e2:61:ab:25:82:64:34:6f:03:
f3:17:91:f2:dc:09:3f:e1:59:f0:fc:6f:4a:06:01:
10:9b:e0:75:88:e2:89:29:e9:ed:51:7d:8b:6a:96:
80:96:d1:71:32:73:ca:2d:b5:21:77:ab:d2:3d:9f:
ec:8f:e3:ee:1c:54:a7:54:d4:a4:38:5c:ba:65:62:
74:5d:1a:58:2a:63:da:4f:16:25:26:94:36:e3:65:
b4:fa:f2:56:8a:1a:0f:9b:fc:7e:45:9e:01:34:5b:
47:57:4b:e7:b7:7b:46:48:49:75:f5:6d:87:61:8c:
54:58:0c:2e:d4:f5:89:30:5b:d8:ee:e6:eb:59:df:
65:a5:68:ed:ea:8d:51:50:82:3e:49:dd:54:0c:70:
09:9b:1e:23:31:50:0c:ec:85:36:8e:13:ec:43:c0:
e8:af:16:e9:90:f3:44:fe:69:0f:df:88:41:2e:fa:
78:5b:a5:d5:68:23:e5:4f:76:fa:13:29:d8:dd:f9:
5d:1a:33:b4:fc:ae:63:23:cf:90:e8:81:0b:25:9d:
27:5c:5b:4f:51:c4:40:24:5b:5d:5a:2f:f1:44:5e:
d7:72:21:06:3c:01:ea:4e:c6:99:25:f1:21:0a:75:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:0E:B5:52:ED:EA:C3:5F:57:F0:98:DC:F8:21:73:5B:FA:51:97
X509v3 Authority Key Identifier:
keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:54:ad:52:4a:5f:86:2b:b1:0e:61:f3:f7:aa:1c:0e:41:
e4:d2:1d:16:7e:c5:24:c1:3e:19:b2:ba:9e:01:83:f0:8c:0b:
d9:40:31:0c:70:90:42:e5:1d:a3:a5:fa:9e:47:b9:d8:99:36:
77:91:cd:62:c6:62:06:47:87:60:5e:28:38:b8:91:b2:e4:67:
e3:a0:a4:e6:39:77:71:7a:c7:f9:b5:54:6e:84:a9:22:42:bf:
ec:46:46:83:8a:85:a4:4f:51:64:22:f2:ec:d8:6f:d9:85:4d:
ea:03:aa:c4:41:bc:45:72:42:61:c9:05:56:9d:ff:2e:b2:1c:
90:0f:9e:9b:06:b7:7e:ef:7c:10:39:a6:f8:25:a4:2e:4c:72:
c7:e2:0f:2d:ba:91:2b:f8:87:75:6d:3c:14:b9:7f:8d:44:e4:
28:40:ec:1b:3a:13:a6:12:62:a9:28:44:e7:c8:35:f3:3e:db:
14:cd:52:76:71:d5:e7:e7:49:8c:7d:b1:57:97:58:ba:fe:e6:
a5:58:64:39:8c:9e:fe:73:7c:a0:69:bc:9c:09:52:6c:e6:4c:
12:f8:91:63:b8:d7:f3:2b:83:85:b3:0a:7d:e6:cb:7f:71:4b:
9b:86:21:0c:8f:81:78:2a:44:16:a6:60:fb:be:5b:9b:85:7f:
f5:96:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:42 2025 by rpki-client