Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: V8tiqsPK3o7nEqh3L2BL9L9RPHnHV0540/ORZIaImzs=
Subject key identifier: 07:3C:EB:0C:91:02:61:78:F3:63:C7:8D:D8:B2:C5:37:0E:29:34:26
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 0198D4E0D45A5FDE79BAE8C0E60410F72E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: Y/IM7NmJhDGOkt5N3Rfef4DBSSjBGqU4b+9jG5YMJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d4:5a:5f:de:79:ba:e8:c0:e6:04:10:f7:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=073ceb0c91026178f363c78dd8b2c5370e293426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:3a:c7:7f:f7:a9:6c:74:31:ff:9c:bd:f8:
42:95:b5:de:66:5b:1a:2f:9f:e5:f3:7d:63:a3:30:
c3:5c:55:eb:d7:66:dd:5b:79:3c:bd:da:89:6a:3d:
69:0a:09:2a:ec:02:2e:a9:73:cd:32:23:9b:9b:32:
46:e5:eb:7a:b8:b9:32:71:e7:d3:17:96:29:b1:8d:
42:38:61:d9:9f:f8:3c:90:a2:6e:fc:65:20:b6:60:
f8:7f:5b:30:99:fa:b8:03:0f:2c:9a:76:a3:9b:5e:
ae:18:0f:36:76:da:36:f8:c4:00:d8:d5:91:e0:18:
e1:06:70:25:cd:7d:8a:c1:6a:e1:b4:87:ba:80:c7:
f6:72:4c:93:30:f8:84:7a:d3:e4:ab:f5:91:ab:d0:
e3:13:af:7b:30:af:02:ec:a0:a9:ec:5b:74:ea:aa:
19:a9:68:27:6a:a3:4a:eb:d4:b4:2a:97:4c:17:51:
6d:db:6d:31:21:21:11:8e:f0:63:98:c6:b1:ae:8d:
6b:54:50:de:77:c6:07:db:6a:bd:ba:e9:17:7e:5b:
6d:04:b3:b7:e6:08:9a:7a:93:10:2e:fa:c7:95:3c:
d2:c0:a5:03:89:d3:ad:04:0e:8c:40:e0:f6:cf:48:
1f:ea:d2:50:85:62:ff:47:1d:63:d9:25:f5:bb:de:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:EB:0C:91:02:61:78:F3:63:C7:8D:D8:B2:C5:37:0E:29:34:26
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:24:c9:fd:c8:ba:a1:9d:42:03:b9:a6:82:af:28:5d:08:
11:4d:29:ea:9c:ef:be:57:f6:0a:73:fc:f7:7c:21:34:a2:8a:
93:c4:85:e7:b4:7d:83:21:11:55:44:f6:bb:12:c4:64:e2:5f:
7b:14:0d:28:cb:cf:70:a4:0f:20:4e:db:08:01:18:08:99:87:
99:35:9d:26:a9:0c:d3:ed:fa:03:10:72:99:71:7f:7f:d0:f3:
c4:9a:c7:17:18:fc:05:26:4f:83:be:83:5a:6f:8c:47:e5:14:
76:2f:40:63:3c:1c:94:e5:ed:30:30:3d:88:74:45:2a:d1:12:
7f:20:3b:20:d4:45:75:05:d4:16:07:dd:32:98:3c:00:c3:03:
6d:b9:b4:5a:18:ef:a3:78:09:4d:36:3f:e9:50:a8:5a:15:c2:
e7:c4:48:b7:fe:4c:8f:ff:9e:94:e7:b6:5b:c4:5f:c4:98:49:
ed:61:ab:98:0e:ef:27:4c:c8:99:ed:fe:9c:d9:67:cc:8d:f1:
c6:bb:69:ea:b4:41:8a:65:c9:94:48:2c:9d:c3:37:29:6e:aa:
75:f2:22:b4:3d:0f:94:1e:d0:42:f0:90:ab:cd:49:f7:b8:66:
e2:97:dc:7a:4b:cd:b0:b4:01:7d:86:17:f3:d7:1f:ff:a7:67:
b2:31:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:13 2025 by rpki-client