Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: 9lzPn/ZDQf1KDmRZRt+zBkPpQo4t7ZZnxw1/rfbN9d4=
Subject key identifier: 84:14:FA:ED:A4:0D:C0:13:88:36:EA:97:9B:29:3E:71:6C:14:B7:5E
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019848895A033809C8B567760E3B99DAAF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0A9E
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 41Dux+Y6CPPzW/8Pneloqzfv6wPEt0lpv9u32INf3UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:5a:03:38:09:c8:b5:67:76:0e:3b:99:da:af:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=8414faeda40dc0138836ea979b293e716c14b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:98:e4:7d:e5:8e:66:40:da:90:38:40:16:
53:77:cb:ce:ce:7e:ea:3f:7f:70:ec:88:3c:94:73:
1b:88:ed:89:7d:d6:67:ab:22:fc:a1:02:c3:d2:be:
34:dc:91:5a:bb:f4:89:70:5d:d0:d6:54:8a:ed:38:
83:84:7b:dd:54:58:c8:66:91:59:e5:76:31:fa:3b:
f0:4e:eb:66:d6:30:6f:9e:65:2b:19:c5:92:af:09:
c2:30:14:82:08:9f:a1:b3:55:ed:67:de:45:02:cb:
03:12:0d:95:2e:f1:82:c0:15:18:8c:e2:ec:c4:d9:
de:85:9c:f4:ce:b1:40:19:96:90:c9:22:7f:39:40:
17:01:65:0c:3d:8c:93:ab:09:9e:a4:89:02:4b:8d:
83:8f:f2:60:9c:7f:62:ea:4f:b9:3b:6e:a2:9b:d3:
d7:d0:47:a7:d1:93:94:b8:ae:60:91:fa:35:4d:3a:
da:5e:77:1d:90:ba:29:c8:36:a2:ff:0f:63:bb:cb:
66:ea:39:70:1a:b6:0f:bc:64:9d:34:58:6c:09:bf:
6c:f1:f0:22:b4:ef:7c:ca:0b:a7:a5:c4:c2:3c:7b:
4f:c1:c8:64:a4:da:c7:8f:c1:43:76:50:31:6a:b0:
b0:10:43:c3:12:52:f4:6f:88:75:0b:38:73:09:0b:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:FA:ED:A4:0D:C0:13:88:36:EA:97:9B:29:3E:71:6C:14:B7:5E
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:30:0f:47:eb:3d:27:d1:be:b7:ab:f5:d2:60:bc:1f:aa:
79:87:08:d3:b9:de:d3:1a:fc:00:f6:f3:b9:03:1c:a2:c2:ff:
cc:50:87:b2:53:f8:52:11:38:c1:f8:c6:c3:d9:56:4e:e4:bd:
0a:56:96:43:ce:b1:d0:27:61:ef:fe:eb:b2:a8:79:f2:62:89:
88:49:43:79:1a:ef:d8:38:1d:bc:0f:68:b2:69:ce:be:0a:fd:
75:c2:75:c4:73:3c:2c:7f:ba:03:6a:bf:4b:49:10:49:95:fb:
f4:49:6e:8e:67:2b:87:5e:2d:05:fe:da:80:da:aa:a6:bc:dc:
cc:fe:e5:30:05:e0:34:94:c2:8c:71:82:e4:d7:70:93:d4:16:
6f:9d:5e:e8:e8:c2:58:89:3b:2c:7e:fa:37:ef:9c:de:52:45:
b5:e8:6b:8f:0f:82:f9:f7:5d:6c:e4:f8:4c:1c:24:18:ce:e6:
b3:12:4d:a7:31:ae:6e:11:4d:21:c3:47:f4:7f:24:aa:3f:3b:
46:3c:ab:22:7c:e6:2f:86:79:17:eb:3b:4d:2c:5b:83:a4:ad:
d6:7d:72:67:87:aa:aa:93:f1:85:97:ad:24:09:70:e6:aa:16:
98:1a:b0:50:d1:cf:22:36:8b:48:6b:f5:21:b1:53:80:6f:bf:
c4:b7:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:00 2025 by rpki-client