Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: KLoKtuhoy4RDnNQ6CQEIFczvu/owDH7MC0Hv4FWUiOU=
Subject key identifier: 9F:0D:2E:DF:AD:2F:E2:AF:9B:44:36:F7:6B:EF:46:4A:F3:FB:AE:57
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 0198D6981863DC10EF6E71D01B18FA73DA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0F4E
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: CRyrXh/l5mPLz36Stwk6Enlkha2zJuK7wx6dFbeJ/Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:18:63:dc:10:ef:6e:71:d0:1b:18:fa:73:da:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=9f0d2edfad2fe2af9b4436f76bef464af3fbae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:8d:29:9a:10:ce:fc:d6:ee:e4:2f:35:85:
6f:95:22:55:62:f8:d8:e1:be:e2:dd:b1:a6:2f:01:
82:66:d4:3c:e6:e6:e2:d0:0c:56:45:6b:4b:2c:d4:
ac:4a:12:89:26:b5:07:d0:bd:7e:c6:06:a0:e2:70:
38:0d:44:1d:da:ff:a3:33:8b:6b:45:91:b0:69:a1:
f8:e3:4c:b5:0c:0e:dc:c7:ae:c5:9e:75:57:fc:0b:
54:3e:e6:b2:99:01:fe:bb:14:b7:6f:8f:78:5d:37:
8a:89:a4:25:73:9f:fe:01:c7:f8:55:3c:3f:e1:c4:
64:63:92:0e:96:3d:63:ca:44:dd:fe:63:72:17:f7:
39:a3:70:95:c8:5e:19:08:c1:37:d7:46:71:98:38:
d3:1c:73:c1:8f:e9:66:83:50:d3:b3:ce:4b:08:13:
e7:79:8f:33:f3:74:02:6d:d9:a9:e5:9b:a2:ef:fe:
03:44:8c:ea:58:db:bd:42:42:de:e7:cc:3b:fd:e0:
86:58:e8:0b:8b:ee:f3:4f:e7:2b:68:aa:2a:8a:77:
31:c1:d0:56:ee:e8:e7:2b:75:d6:bf:01:05:96:f4:
e8:cc:fe:16:8f:d2:d1:cf:04:fd:03:f1:ec:4d:13:
d1:16:53:9a:35:12:2c:06:6a:f3:cc:eb:2f:25:a8:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:2E:DF:AD:2F:E2:AF:9B:44:36:F7:6B:EF:46:4A:F3:FB:AE:57
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:ca:84:8c:8b:10:b3:fc:17:a0:d3:53:bf:6a:db:47:83:
52:8e:37:28:cb:23:2e:8f:3f:b8:19:3c:1a:48:5c:80:67:7d:
1b:00:81:64:bb:f5:a8:f9:81:4c:97:51:f6:31:c2:b2:cf:e5:
f5:4c:97:72:ae:0c:4b:b1:1e:55:4b:af:f1:c0:ad:ab:80:fc:
6f:26:40:74:f3:f0:6f:b1:0a:ed:86:0b:89:c1:d0:47:c2:1c:
df:eb:3e:f3:14:23:e0:f7:21:09:bf:d9:0d:a3:1b:f8:74:89:
ce:b0:33:ec:c1:42:01:5a:99:a1:67:3d:93:d0:b6:bd:3f:0e:
d1:f3:d3:21:8a:19:f6:42:85:c4:8e:35:ce:f4:77:77:60:45:
39:a7:15:59:67:3e:0e:c7:2d:64:1b:90:ee:27:af:17:7a:60:
f8:f0:1a:f4:5d:70:d2:5a:10:68:03:7c:80:3f:4f:83:25:55:
dd:36:af:46:be:5c:e3:5c:4d:ee:7c:be:6d:85:b4:51:48:d8:
d7:2b:57:0e:ce:eb:62:3a:a2:97:88:10:99:f1:86:87:0c:d0:
b5:b1:b5:be:21:c1:42:03:38:57:3d:82:a2:e0:ac:a9:8a:fe:
1a:f3:0a:36:c6:e0:30:58:11:03:ae:e1:84:50:c8:1c:20:dc:
45:be:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:55 2025 by rpki-client