Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: KnD0Swd4HJdbARWYZBLLsFtUmWOInVm9PeYiOClNPRg=
Subject key identifier: 90:FF:46:57:7B:18:65:39:3B:21:A6:CB:5F:7A:8C:51:BC:C2:8C:FE
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01984A78272F7FC5FAF99C7DC24D60C70233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 06:00:44 +0000
Manifest this update: Sun 27 Jul 2025 06:00:44 +0000
Manifest next update: Mon 28 Jul 2025 06:00:44 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: sIiRG4W2CkxLJEZD8PER7u5sCWsrlR5Qo1g+I+gAAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:27:2f:7f:c5:fa:f9:9c:7d:c2:4d:60:c7:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jul 27 06:00:44 2025 GMT
Not After : Jul 28 06:00:44 2025 GMT
Subject: CN=90ff46577b1865393b21a6cb5f7a8c51bcc28cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:22:25:4d:53:02:0f:5f:c0:28:76:56:f0:
6e:7f:df:a4:0b:87:c0:60:a2:e9:ce:f0:33:48:dd:
cf:cf:39:b2:aa:86:dd:29:cb:99:72:25:f6:ca:81:
fe:5c:86:62:72:b6:fc:95:49:d4:39:d0:08:7e:b9:
6d:fb:2b:ef:5c:9a:68:1d:18:15:80:65:d0:b7:84:
9f:6e:9c:15:9b:f0:0d:a2:6b:ae:60:92:8e:ba:76:
5e:e3:3d:18:63:ee:7e:58:b8:04:37:d8:91:84:32:
67:c1:8f:b6:e1:98:eb:18:10:61:c2:7c:a9:5f:fa:
f7:0c:0a:32:34:00:ab:ab:fe:c4:0a:ce:24:5e:c1:
e7:c9:cf:15:33:85:1f:33:06:62:8e:05:ce:04:ca:
24:3f:f0:50:ff:82:d3:eb:96:ef:ad:a0:7f:59:fd:
14:2d:f5:43:c4:b3:c1:7b:32:ac:3f:22:ad:d5:75:
44:12:1a:14:23:38:eb:92:c1:8a:e5:a0:e8:f4:43:
f9:a2:e1:85:07:ec:ec:bf:de:47:fb:e0:63:7d:50:
55:45:ab:71:7a:62:6d:c6:ff:69:05:23:85:13:d8:
df:16:15:e7:85:7e:f1:55:50:73:50:d7:ff:df:78:
2a:75:b9:96:d9:49:7a:00:1e:95:66:2a:06:14:69:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:46:57:7B:18:65:39:3B:21:A6:CB:5F:7A:8C:51:BC:C2:8C:FE
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:e4:51:e2:ab:11:69:10:78:6b:17:1d:27:69:ab:b4:86:
ac:2e:bc:c2:93:5b:98:55:34:52:ed:f9:39:14:f4:44:89:7a:
32:84:0e:77:10:85:96:e3:cf:46:89:f7:e4:92:91:09:41:18:
7a:f3:f0:04:8c:47:6d:1a:16:3e:5e:3b:68:0b:b9:8a:f2:10:
d8:dc:1f:24:a9:df:47:bf:cb:42:6b:da:73:38:e8:9d:f0:56:
53:a3:69:c3:bb:4b:8c:e3:7f:a1:c5:37:6f:78:a1:8a:30:a4:
2c:71:9e:61:cb:61:8f:e8:4e:c0:15:d1:c5:68:96:f8:86:5c:
ef:fe:2d:6c:17:6b:c7:89:6a:1c:0b:af:41:ee:af:70:05:e4:
40:53:8b:05:8c:a4:53:83:2d:05:d8:14:04:7f:7e:a0:c8:e2:
55:0d:ce:73:b7:18:3b:02:64:d3:d6:f3:92:99:44:c5:68:d9:
c9:c4:90:f9:00:23:72:9e:32:72:93:9c:7e:bd:2c:bf:4a:60:
93:6b:0e:00:84:5f:ef:c4:c6:17:db:d2:17:9c:9a:0c:83:73:
c0:c5:c9:4e:a8:5c:78:a9:cb:01:98:b7:e6:26:d5:76:f4:23:
ce:3d:93:a8:1a:02:51:2f:8d:98:c7:13:2d:29:7d:19:c8:ff:
22:c8:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:28 2025 by rpki-client