Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: +Z0Hee9xyGezVY6Z74Nw94SLZV42ZOV7XcFYarIB0Nw=
Subject key identifier: CC:69:81:59:DB:BD:2C:9E:85:EB:18:B4:9F:53:4D:DF:B5:62:42:9A
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 01989DBA22F31882755D0C6E69D2C58BB23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 163F
Signing time: Tue 12 Aug 2025 10:01:18 +0000
Manifest this update: Tue 12 Aug 2025 10:01:18 +0000
Manifest next update: Wed 13 Aug 2025 10:01:18 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: MtAuW3Utf4Zx92BhXbeUtEW6lk/prPmUQWbECvHd89g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ba:22:f3:18:82:75:5d:0c:6e:69:d2:c5:8b:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Aug 12 10:01:18 2025 GMT
Not After : Aug 13 10:01:18 2025 GMT
Subject: CN=cc698159dbbd2c9e85eb18b49f534ddfb562429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:3d:cc:b5:17:8a:a7:b7:92:7b:95:5c:30:
48:17:66:34:4b:e1:dc:85:32:c7:78:b2:b6:f2:02:
2a:3b:c1:2b:f3:79:da:ed:3e:52:f2:f7:fa:11:b2:
d7:06:c6:84:ea:a1:2d:42:c5:51:c6:12:59:4d:99:
76:78:ae:4f:c9:7f:2d:70:86:f1:80:f0:81:2a:5e:
b5:d1:2e:ae:4b:25:90:a1:48:59:60:10:86:9a:54:
fa:3a:a8:52:88:ba:8d:c2:e0:46:ac:73:f6:8b:99:
3a:59:76:6a:f5:02:6a:b4:d3:f0:28:2c:94:86:78:
c1:2b:04:13:cc:b8:fa:ee:10:59:bc:fd:34:ec:f6:
26:4e:39:c7:75:ae:3f:4f:cf:44:b6:1c:23:25:aa:
52:a5:b1:7b:bc:25:c3:8f:ad:a5:e8:b8:fd:21:96:
86:25:ff:3a:2f:53:6f:96:ee:30:8d:bb:aa:d5:fc:
66:26:a8:02:9e:c4:78:24:c4:f6:9b:57:78:d1:42:
da:60:cb:92:ff:8c:19:76:d3:cf:02:59:c9:0d:81:
c4:dc:ca:52:aa:90:6e:9b:43:e2:22:1d:47:73:e1:
11:22:73:62:a3:73:b1:89:bb:6e:59:20:87:47:93:
cc:0d:a0:29:2f:8e:f0:9a:be:54:97:fc:d5:24:6f:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:81:59:DB:BD:2C:9E:85:EB:18:B4:9F:53:4D:DF:B5:62:42:9A
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:19:de:60:5a:08:81:6c:04:89:60:ef:74:2a:58:a2:09:20:
d9:fe:69:70:9e:c0:bd:57:11:de:8d:b1:08:1e:76:ac:9d:cf:
63:ff:8b:9b:3b:c8:8a:62:13:f3:02:1b:a6:12:fb:f0:14:03:
09:1f:14:de:c4:af:43:c9:ac:f0:fc:48:8b:9d:c4:df:b3:b4:
4b:39:1b:e6:4f:3d:b7:d7:04:c8:61:55:31:60:e5:c0:ba:fd:
1f:dd:d6:e8:27:89:db:c7:e0:2e:12:6d:97:dc:56:44:c5:12:
ae:11:8d:6c:6a:ca:50:63:ad:79:e3:89:ee:33:0b:44:2f:ee:
67:e0:76:09:d8:01:49:26:00:40:92:66:f5:fa:8f:06:d6:1f:
3c:e0:0f:da:77:68:4c:9c:ac:02:fb:15:a1:06:57:f0:0b:ac:
de:86:56:1c:9b:4f:db:fc:6c:90:9a:69:da:3c:d1:e0:47:fb:
a8:38:9c:58:82:b0:03:ea:69:2b:a8:01:e3:a9:08:96:f2:4b:
71:a2:4d:2a:31:21:08:0e:90:b8:48:ac:0e:32:cf:48:46:e6:
39:c4:89:dc:4d:17:b3:ee:65:0a:d2:5d:15:4b:ff:bf:da:2a:
ee:fc:0c:0f:bb:aa:2b:7a:c6:07:a0:af:ea:ca:ca:dd:b1:1c:
35:eb:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:09 2025 by rpki-client