Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: Qk60xPP/Enx6vu/rhf4oBruQv8n410j8Yi9/txYpmUc=
Subject key identifier: C7:5F:8F:39:8D:AA:66:CD:88:56:31:5B:8B:71:03:4B:44:57:01:BE
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0198530E34CEFBD2567DE9089E66BFDC984B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 22:01:36 +0000
Manifest this update: Mon 28 Jul 2025 22:01:36 +0000
Manifest next update: Tue 29 Jul 2025 22:01:36 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: 2sulnLAuGTuCRfeeJqHQWpHMwG1IOIt/5fa3GL18cqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:34:ce:fb:d2:56:7d:e9:08:9e:66:bf:dc:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jul 28 22:01:36 2025 GMT
Not After : Jul 29 22:01:36 2025 GMT
Subject: CN=c75f8f398daa66cd8856315b8b71034b445701be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:67:90:0d:cd:e2:9b:31:cf:3c:57:fe:89:
91:50:f2:b5:b6:76:92:e7:31:c5:a2:4d:42:0a:92:
70:98:35:cd:f4:a6:15:11:13:62:cc:cd:0f:70:ca:
aa:e6:f3:5b:f9:af:fe:1f:92:0c:c2:12:22:79:f9:
ed:2a:12:10:1d:9b:5e:04:b5:7a:40:69:df:4d:d3:
ad:8d:8b:0c:cc:34:f3:e8:4f:08:01:34:95:e1:4a:
bc:31:f9:f8:f9:ce:fd:38:cf:e6:e8:18:1d:9d:4c:
3f:22:c3:88:9c:34:dd:8d:2f:de:28:c4:d9:44:17:
ff:57:39:1a:29:45:de:e3:b1:a7:ce:95:a2:03:02:
13:56:0a:52:d2:c4:0f:84:1e:13:d9:40:ef:87:b0:
b2:c0:32:1a:7a:2a:4c:90:de:fa:dc:20:3a:83:38:
de:d1:da:21:5a:ba:d7:b5:95:a6:f3:f4:f3:fe:e1:
80:f5:d6:47:7a:83:96:f8:45:85:e1:e1:25:70:9a:
88:36:2a:b6:d1:e7:dd:ed:98:a1:4b:3c:00:e9:3c:
2b:92:f4:ae:98:05:f6:fb:06:03:d3:d7:b0:5f:3b:
78:a9:01:93:a3:c5:fe:a7:3e:7b:bf:d7:ff:2e:74:
44:e2:f9:ce:4e:a0:89:9e:7d:db:9c:b0:83:56:45:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:8F:39:8D:AA:66:CD:88:56:31:5B:8B:71:03:4B:44:57:01:BE
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8c:50:94:86:8f:89:fd:71:fa:a1:b3:1f:6d:0f:fd:b1:20:
13:24:1d:dc:55:4f:8f:1d:dd:51:3c:ba:0e:5e:7a:c2:22:29:
7e:c1:4b:95:a1:ae:ce:10:bf:09:fd:93:ed:7f:30:9c:04:13:
48:d3:5c:c8:96:c0:15:e8:11:72:a2:1c:b8:00:ff:cc:30:47:
2a:32:7e:60:25:9b:1e:6a:d3:cb:71:f3:4d:8e:58:3f:06:62:
b8:e7:05:d9:68:59:47:2d:d2:44:ff:37:ee:da:e7:9e:c9:7c:
f2:68:62:b9:1d:2f:7b:6d:0a:02:1e:57:84:16:d5:74:6b:0f:
cc:17:1c:5a:61:ae:0b:b7:a4:d9:4f:10:46:bb:77:ea:f9:0a:
80:f3:7b:80:b3:e6:11:ac:57:52:9e:a3:f6:66:bd:fa:5c:a7:
17:c7:48:fa:62:b1:81:bf:22:2f:27:13:2b:a4:cb:11:4d:f5:
07:fb:fc:76:68:5a:9d:96:1c:14:75:4f:9a:7f:b9:50:86:a7:
8c:ca:08:48:fd:b2:7c:62:c4:67:d3:da:ef:2a:a4:63:b9:0f:
e1:ba:97:86:f8:38:8b:d0:48:51:ab:d0:40:0e:c0:10:ce:30:
f8:e3:0f:58:be:c3:9f:cd:b5:5b:60:1c:6e:34:74:14:35:8a:
d1:67:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:02 2025 by rpki-client