Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: i1pRDAlYpI5esz9NNcKqUzHZ9jLM2J0/XiY/aoPrVYQ=
Subject key identifier: 64:FB:25:EC:EB:99:78:74:2F:48:D7:23:7F:B5:DA:84:D4:74:6C:BA
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01984965F1ED1204A38075A76D0FFAFA5926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 0A60
Signing time: Sun 27 Jul 2025 01:01:14 +0000
Manifest this update: Sun 27 Jul 2025 01:01:14 +0000
Manifest next update: Mon 28 Jul 2025 01:01:14 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: vqGWuPvFGNjf+DXos+5Ekfmp8KFbMyPTMsnWLFPQomc=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f1:ed:12:04:a3:80:75:a7:6d:0f:fa:fa:59:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jul 27 01:01:14 2025 GMT
Not After : Jul 28 01:01:14 2025 GMT
Subject: CN=64fb25eceb9978742f48d7237fb5da84d4746cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1c:12:93:d7:b4:dc:04:33:0e:a7:ea:29:81:
2f:f9:8b:ce:b6:55:ab:f2:09:9c:12:f7:5f:5d:80:
e6:b7:ef:9a:0d:28:a3:3c:0d:d1:a1:97:37:79:3e:
65:aa:4f:03:5f:a9:1c:42:92:34:49:86:d7:11:5f:
8b:56:5e:62:6b:db:18:4c:00:00:82:e0:6f:88:e6:
8b:11:9c:27:ee:e8:e3:ad:ad:7b:93:71:85:67:eb:
aa:41:85:de:c3:58:d0:c1:05:7d:4d:3a:8a:6f:51:
96:f0:d3:59:39:29:97:27:c0:fa:c3:13:5b:4b:92:
64:22:23:88:40:32:a5:e0:75:f2:6c:3b:3d:a8:76:
ae:64:5f:c4:1a:a5:1b:7d:ac:23:e5:78:cb:44:7b:
07:9e:f3:1e:cc:86:3f:6a:d4:7f:e1:d6:62:f2:b5:
b4:02:52:d1:4d:6c:50:ff:be:95:1d:10:d5:cc:e7:
f0:7f:36:54:10:13:42:d4:25:83:cc:14:96:8f:60:
85:46:83:3d:4d:f5:f3:98:fd:f4:e9:01:4d:4b:c8:
78:de:7d:c6:b1:c9:38:27:9b:21:d4:a5:74:6c:71:
fd:5c:6c:4f:e3:92:8a:6f:b4:57:01:f1:11:86:10:
45:c8:e3:97:64:6a:b6:8f:c9:d2:f8:b4:39:fd:2e:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:25:EC:EB:99:78:74:2F:48:D7:23:7F:B5:DA:84:D4:74:6C:BA
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0c:dc:82:c8:98:9f:cf:89:df:95:9b:5e:b9:da:ba:d5:31:
8f:57:b8:db:5c:80:8b:57:61:2d:dd:58:45:d6:e5:2d:48:b9:
42:9d:a3:22:0c:81:82:50:fd:4e:cc:d1:9a:bd:7f:df:db:e6:
8d:fb:20:07:42:b8:6c:ff:40:1c:a6:0d:69:1c:2c:e1:5d:b6:
69:ab:a1:24:53:91:a7:be:22:c7:17:86:5b:75:37:03:01:c2:
30:d1:e1:f7:f2:af:b3:83:26:39:09:f6:85:10:63:28:a5:3d:
93:0a:3e:8b:7f:5e:06:1e:16:a6:6f:f3:14:10:b5:cf:89:1f:
49:52:cf:85:b4:92:e3:4a:40:a3:9e:e0:b4:c9:47:45:8f:7b:
14:09:5c:d2:40:12:be:52:fa:d3:ce:c2:c3:3c:50:90:5b:35:
8b:aa:2a:70:6b:ad:8f:1c:2e:93:a8:d4:35:55:05:d2:5f:ec:
37:d3:cb:e7:f5:a1:e6:a1:24:ea:ba:95:49:d2:60:ab:24:6d:
85:5c:19:e1:20:ba:81:07:58:96:3d:69:d7:af:c2:f3:2d:70:
8b:70:3b:b3:5e:81:80:f0:71:5b:df:70:54:01:5e:95:bc:a3:
d8:91:9b:ad:ac:86:d5:49:e9:18:e0:b6:2b:33:4a:c4:90:92:
01:61:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:13 2025 by rpki-client