Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: ZRsMtFp/KMIOHc1TJk3bq33OHvQgqLMUvr4qfpkGi6E=
Subject key identifier: B3:29:AE:16:3B:BD:56:08:0F:6C:78:0D:32:B9:11:83:AB:A4:57:02
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 0198D5158677D02730705C35FC0E2D9B343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 09B7
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: C8OuOurMHam6ULOHJv9GhDHbke0.roa (hash: FCUaWvRRTTPQBQKJI7hbkOja4mLEhLWKn2frcis10m4=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: PCOA8afPk0FBEhnpB4b18I3muTXLFm3+pkQly96Hft4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:86:77:d0:27:30:70:5c:35:fc:0e:2d:9b:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=b329ae163bbd56080f6c780d32b91183aba45702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:c3:e0:ab:4a:c4:32:65:21:de:27:ef:0a:
80:14:11:66:a9:5e:a2:df:f2:5a:ab:64:51:20:60:
7e:7a:f4:19:b9:bf:0d:b3:5d:db:a7:08:68:08:fa:
5d:83:d6:9b:a7:06:07:39:b1:ed:cb:6b:a4:01:bf:
6e:08:a7:ac:aa:e0:be:95:39:ca:49:86:a4:3b:8b:
b2:5f:78:18:0b:60:dd:c6:01:02:48:ce:e6:c5:85:
6c:bd:17:30:9e:4a:d1:5f:45:d7:89:28:c7:db:64:
a1:31:3b:4a:0b:a1:d0:ae:8f:8e:5c:f0:9f:7d:81:
48:70:e6:7c:80:3c:81:d5:22:8b:67:be:72:96:de:
c4:e4:72:a4:f2:7e:1f:2f:74:8f:86:d5:d5:f3:b6:
73:4e:9d:b6:2c:a9:18:1f:55:64:c5:93:25:64:3c:
10:f9:d3:ac:c0:7f:c7:d6:94:eb:13:97:89:b1:f2:
98:12:e3:5b:f0:4d:75:c5:1d:07:76:f8:08:41:ad:
f6:be:23:d9:7e:9e:8b:34:23:88:e4:8a:42:e5:0e:
ba:70:47:3d:77:cb:d6:91:12:cc:34:1b:e8:22:c7:
3c:0e:27:d2:f2:bb:ad:7a:4b:5b:c4:2d:20:69:d1:
01:eb:39:e7:33:c4:f6:16:dc:da:b9:08:07:cb:8f:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:AE:16:3B:BD:56:08:0F:6C:78:0D:32:B9:11:83:AB:A4:57:02
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:37:7a:ee:f7:c5:ec:ea:df:ca:5c:a2:18:03:0f:b8:03:c1:
c7:b1:2b:6b:8d:8b:64:be:36:be:92:bf:8c:b5:6a:e1:d3:af:
bd:75:2c:af:4e:e4:b1:3a:bc:57:9c:29:b2:75:12:79:77:e3:
4d:32:a4:34:4f:20:a9:b5:08:d5:39:fb:62:a0:f5:c2:28:fd:
55:73:3c:e2:6d:95:86:6f:63:b3:5d:b7:76:c2:85:a5:f0:f7:
ac:00:2e:71:0e:39:40:5c:93:52:c5:13:8c:2c:80:f1:33:20:
7e:48:ec:1f:de:f2:34:62:f1:02:f0:1a:15:35:66:af:4e:8d:
70:eb:36:07:49:90:e6:4a:8b:dd:5f:95:bc:43:89:da:6f:f1:
93:b6:9c:77:f1:69:5d:28:b8:c7:c2:e0:43:20:5f:8d:44:d5:
e2:3e:5f:da:c5:18:a8:c8:9b:a7:08:af:4f:7a:ab:8c:54:2c:
18:f2:84:d7:fe:a9:5e:82:81:55:80:8d:f6:ba:a2:39:7a:01:
bf:56:94:9b:aa:a4:fa:b6:85:1c:6f:1f:86:ca:5c:a7:f8:97:
19:d7:aa:e8:ee:36:5d:60:cf:ea:af:ec:42:f1:88:46:e0:02:
f6:df:b6:18:78:6b:08:2d:bc:a3:94:cf:8e:a5:98:64:56:ab:
d0:10:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:52 2025 by rpki-client