Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: itqcLKt36DRWBo3PqfJlhnqIhaxEGigK9MFGEdNlAjY=
Subject key identifier: F4:33:27:01:80:9E:BC:74:7E:C0:30:DD:C9:4C:40:1D:FF:3D:FE:EE
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0198D54E6BF0D194DEADEC07C8918202D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0811
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: nGRqyPcKgF+VCQT3cjD1z0VyTqtBywnXFPUcKGlax1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6b:f0:d1:94:de:ad:ec:07:c8:91:82:02:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=f4332701809ebc747ec030ddc94c401dff3dfeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:b0:79:7d:5b:44:a5:c6:33:ce:c7:6e:49:
8a:aa:53:0f:3e:b0:12:3e:00:d1:0e:53:62:20:a0:
c9:a6:5b:4e:36:bb:37:a7:da:6d:07:60:3a:b0:b2:
50:25:a0:d7:a0:d6:f3:84:b0:17:40:38:c7:b6:27:
a6:f8:a9:54:4b:58:58:38:bb:ed:39:f2:f7:23:d0:
89:d5:52:23:b9:1b:a3:0b:37:ee:20:93:55:3b:5f:
20:89:ba:5b:16:ae:fa:38:0c:9a:43:16:a7:ff:25:
46:d2:98:3a:c7:02:d9:12:0d:f2:11:16:cf:e0:06:
a9:1b:de:e3:97:a7:ef:bb:29:2e:ef:c1:b7:39:03:
74:87:5e:2a:d8:15:8f:24:2e:4f:e8:9e:bf:b2:fe:
b1:fb:e0:1e:28:01:4f:ea:09:c9:6a:2d:2d:67:2e:
4d:e0:10:aa:54:90:b1:fe:3b:8e:87:68:be:65:99:
b0:6d:11:9c:7e:29:32:8e:bb:fb:57:85:b9:0e:8c:
31:52:00:09:ac:9b:d3:3d:ec:44:66:2f:3e:a0:2a:
eb:c0:2e:e7:b1:d7:ee:25:06:72:2e:2a:a5:e4:58:
bc:38:01:39:a8:e9:07:7a:aa:e9:07:e6:24:07:8e:
d2:1b:5a:e2:79:89:5d:af:fc:5d:f4:a0:65:c0:18:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:27:01:80:9E:BC:74:7E:C0:30:DD:C9:4C:40:1D:FF:3D:FE:EE
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9d:13:b3:b6:78:51:09:b6:30:35:ed:e2:09:d7:a2:56:90:
1c:28:41:d8:d5:69:63:90:5d:ff:dd:28:6b:90:d4:a2:79:5e:
7d:e8:88:f8:58:8c:c0:a9:09:f4:66:e5:84:02:82:1d:eb:f4:
01:0b:8b:7a:8a:17:56:5e:f0:3f:1a:18:ca:af:aa:4e:61:16:
37:b3:d6:0f:07:f7:3c:d8:86:80:ef:ac:60:e6:c7:e3:8e:9d:
62:4b:40:0c:d1:c4:6a:28:f0:8e:fb:fa:44:51:c1:71:80:2e:
c7:5d:57:86:21:73:2b:13:96:b2:a2:c2:4f:63:8c:78:57:e2:
18:d5:b2:a7:60:2a:b9:65:5b:de:a0:ae:cb:19:65:91:68:99:
f3:b9:a6:e4:96:27:4a:e2:85:ec:a9:e9:6c:d5:9d:7c:d2:ab:
f6:0b:46:7d:85:fd:4a:05:fd:6f:99:65:1a:b3:2a:d3:16:07:
04:5d:58:5e:0e:7d:1f:8a:0a:c1:ff:cc:8d:25:ca:af:b0:1d:
7a:65:72:8c:39:6a:dd:b7:76:65:56:cd:88:84:ae:5d:d2:47:
34:db:26:95:53:9b:f0:38:b7:b5:0a:ea:30:8a:2f:ee:1a:80:
07:52:db:d8:3b:91:c6:8b:c8:3b:36:9e:f0:06:1a:c9:de:36:
73:2d:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:10 2025 by rpki-client