Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: KLxndvL/BRD+m6puXftFejnwQccvwrUrsYW6H0Us/IA=
Subject key identifier: 79:E8:6B:84:81:7D:91:0B:18:9D:EF:F0:AA:43:22:D2:4D:81:6E:B7
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01984A77CE24749E6CDE6517D4F95A760146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 06:00:22 +0000
Manifest this update: Sun 27 Jul 2025 06:00:22 +0000
Manifest next update: Mon 28 Jul 2025 06:00:22 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: yP+ofCpbO3wIloqPr7F7zgxmnc3lFRDvhCDgEfmccDY=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ce:24:74:9e:6c:de:65:17:d4:f9:5a:76:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jul 27 06:00:22 2025 GMT
Not After : Jul 28 06:00:22 2025 GMT
Subject: CN=79e86b84817d910b189deff0aa4322d24d816eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:b1:92:78:9a:ac:47:eb:59:cb:10:49:04:
d5:0f:01:ca:7c:29:84:38:a4:7a:a0:ba:77:46:38:
26:24:1f:6a:55:3a:0d:70:86:a9:9b:e3:19:af:2b:
f6:74:fc:dc:80:26:08:a7:45:ac:35:bb:72:8b:f4:
5a:d8:e3:5a:bb:0c:ed:be:ab:84:51:74:04:59:2b:
e1:d0:57:ab:12:6b:ef:dd:82:cb:3d:d0:c6:4b:85:
9b:e6:56:c1:08:63:92:8d:d8:9e:95:32:3e:95:4f:
50:e7:a0:ad:66:da:32:bf:29:6f:f2:95:2b:08:ee:
75:40:df:1c:a5:0e:5c:30:41:04:5b:89:fe:99:d7:
38:65:6a:d0:79:d8:a5:bc:65:50:c0:02:53:35:6a:
e4:51:75:1c:bb:6f:9e:8d:96:d6:66:ad:4f:5a:e9:
87:a1:36:42:03:28:a2:7d:6a:ff:10:f1:92:05:89:
c9:fb:de:e3:81:cd:58:02:13:cc:55:1e:b3:78:6a:
85:75:84:25:0d:0c:fc:eb:fc:6a:98:5c:e6:1c:f9:
ea:d7:49:81:1c:16:7a:09:5a:10:8f:b0:69:d3:2d:
6d:f0:d6:df:19:ec:9a:b6:19:19:0f:bf:a1:e2:97:
12:4b:19:d8:4f:7f:2f:07:8b:36:04:79:1b:4e:05:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:6B:84:81:7D:91:0B:18:9D:EF:F0:AA:43:22:D2:4D:81:6E:B7
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:78:36:8f:c6:f6:6a:b6:55:06:d8:b1:8e:51:32:9e:ef:f0:
ce:32:3e:5a:5e:00:9b:9b:15:c0:af:f5:1a:cf:94:cf:eb:41:
3e:ae:2d:49:12:e1:3c:99:85:8f:4a:8c:b3:ee:d0:d3:bc:6d:
6b:95:be:db:a3:25:87:47:73:61:ed:a7:01:f2:3d:37:b6:05:
3c:d9:7b:de:b9:13:bd:66:f6:e4:59:bf:08:3e:3b:6c:1c:53:
42:cd:27:23:d9:03:c9:87:77:01:0d:75:0e:d0:00:1d:dd:db:
58:47:3b:83:b1:52:63:9f:5b:de:29:7b:63:c6:c9:93:9f:39:
64:4a:22:8e:93:97:f2:27:93:58:17:b2:f7:bd:21:8f:a0:51:
43:2e:95:a3:ff:1c:0e:71:f2:5b:c6:f8:f5:96:44:0a:9c:39:
fd:dc:5a:bb:72:09:47:90:5f:0b:9e:b5:92:4a:20:f2:63:2d:
87:ed:35:07:f5:7e:0d:14:d1:29:25:cd:80:67:94:8b:12:e3:
28:94:14:2f:9c:27:f2:bc:b6:c9:c1:97:8f:fa:d5:a8:3f:14:
31:2e:d4:b4:02:62:02:c1:06:8b:fe:81:c2:d6:b8:aa:2a:4b:
3a:be:1f:52:a1:dd:29:0d:3e:9d:6f:f3:36:80:a4:7d:ae:c6:
47:31:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:18:50 2025 by rpki-client