Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: cD80mqYS9rKi60yj3wop1W3/lbNQ9FwNLjoQ+sMqVF0=
Subject key identifier: 73:2D:43:94:55:92:D8:4F:FA:DE:75:07:3E:E7:BE:0B:E6:72:41:07
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0198D583C9B1D90EBF704D321CDAEC62077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: rOYRONczLywho2vRKi+xzG1UL+SW+x2rcgwPb0sdkq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c9:b1:d9:0e:bf:70:4d:32:1c:da:ec:62:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=732d43945592d84ffade75073ee7be0be6724107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:15:0e:55:4a:46:96:78:e5:08:bc:a7:b7:
d5:66:75:59:09:8c:3c:7f:5b:6d:08:0c:93:bb:ae:
26:cd:91:ef:23:a0:cf:3f:81:6d:19:96:68:7a:06:
b2:ce:92:8b:15:a6:f1:18:d1:b3:38:27:3a:62:02:
45:2e:74:57:45:c1:cd:f9:ea:82:53:40:fc:c1:25:
6b:67:cf:7b:3e:e2:c4:4e:de:0c:4f:14:a5:e0:5f:
6f:00:2b:36:7b:64:04:54:5c:52:40:f2:cb:4b:05:
38:2a:8f:e9:9c:58:eb:30:5e:8e:ca:77:26:cf:f1:
4f:02:8b:aa:0b:26:79:d3:8f:cf:0f:52:03:fa:3a:
ef:e2:6d:01:11:a3:08:1e:42:8c:f5:ab:50:7c:09:
5c:11:ef:35:51:88:87:b7:90:7b:76:ff:6b:47:1d:
f1:0b:b2:94:af:1b:bd:77:1d:2f:60:52:28:60:b0:
3e:45:05:66:0c:fc:2b:dc:4b:25:6d:ce:3e:8b:5d:
bc:96:76:19:82:69:56:a7:7d:8d:56:91:d5:f5:d8:
3f:13:67:6d:65:41:07:a9:b6:60:f1:cc:2e:96:64:
7d:9c:fb:95:8b:1a:1d:6e:39:b0:2d:9f:fa:c5:8a:
0b:94:3f:a1:af:b0:55:7e:9a:60:18:f7:f7:1d:40:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:43:94:55:92:D8:4F:FA:DE:75:07:3E:E7:BE:0B:E6:72:41:07
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:38:b4:d9:19:f3:02:10:fc:14:5c:4c:b2:23:b8:ca:7b:
d6:97:4a:8e:a2:11:d9:eb:0f:5e:64:d0:cc:06:89:29:18:26:
3e:91:43:e5:db:b5:b5:3c:c2:25:c5:ad:d7:75:63:75:48:ca:
53:cb:d2:73:30:31:60:50:6b:de:d8:e1:1e:b3:07:5b:4f:5b:
05:5c:69:be:e2:43:75:4c:11:d1:06:6a:38:aa:7a:45:3f:59:
d3:a3:da:b5:c6:d4:84:2e:e6:10:26:a4:c3:43:7f:81:01:77:
63:e1:2c:16:1a:9d:aa:77:bd:20:d7:e3:c9:30:66:0f:cf:de:
0a:43:d8:d3:2c:4b:03:ed:7b:79:77:0f:e1:48:90:09:50:cb:
f1:f8:d7:82:b4:c2:6a:8b:2f:a9:b4:07:4e:80:6a:d3:c6:29:
4f:48:12:8e:2f:1a:e3:95:fc:cc:99:01:dd:8e:70:78:b8:eb:
79:b5:38:94:62:db:62:f6:2a:15:be:d5:26:42:cc:7e:ff:16:
1a:ea:71:37:10:5e:b4:a2:04:e8:78:40:ec:69:40:a2:18:f0:
01:2f:e4:d1:b2:4f:72:9e:df:ca:9c:d7:06:84:47:60:36:f5:
9e:2b:59:4e:68:a1:61:e0:b9:87:c3:6b:3d:ce:80:22:db:43:
b5:4c:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:55 2025 by rpki-client