Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: fJ53kn3f9aurZSSTBK3OUHsAP4n5L16SCG2F3z2BDTo=
Subject key identifier: F7:DA:21:4A:61:89:71:FB:8F:11:A8:AE:51:05:F5:E9:2E:18:16:22
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 019848F7745081D9DAAE322B44F90EE37664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 088C
Signing time: Sat 26 Jul 2025 23:00:33 +0000
Manifest this update: Sat 26 Jul 2025 23:00:33 +0000
Manifest next update: Sun 27 Jul 2025 23:00:33 +0000
Files and hashes: 1: If5j4KjsWFg3kwDUxrHpbFCCjpg.roa (hash: iGbVOgQjxfoZ4tZTHfIMlZvCv27war8Yd/ywUcGl39o=)
2: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: 0iCerhYE0nSAr2fqX/we0j3vq4G6Ir27WQ7mT20koAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:74:50:81:d9:da:ae:32:2b:44:f9:0e:e3:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Jul 26 23:00:33 2025 GMT
Not After : Jul 27 23:00:33 2025 GMT
Subject: CN=f7da214a618971fb8f11a8ae5105f5e92e181622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:f7:5f:cf:31:7e:8b:1e:4b:88:65:f8:42:
1f:98:2c:da:27:49:b2:21:a1:d1:7f:be:d9:e8:69:
e3:be:4b:ed:7f:99:c0:84:56:09:e8:f5:f0:c2:77:
76:00:9a:cc:37:1b:77:ce:f8:d5:7c:b8:b3:cd:2b:
24:53:6c:51:09:41:a0:ed:e9:a9:83:e1:31:a4:f2:
0f:1d:c7:74:d0:c3:2e:f7:ae:25:73:29:1b:97:d8:
4b:08:a5:8f:f1:c9:72:65:5e:92:76:0f:de:4c:1d:
c4:3e:32:e7:1e:7c:c3:4b:36:d8:ec:19:a5:a3:a6:
ea:37:b4:c8:9b:76:9c:6e:63:51:54:0d:83:a3:85:
21:13:79:0c:93:a4:fd:1d:67:27:f3:54:c8:2e:c9:
30:fa:c0:04:38:99:ce:2b:e3:1e:2c:cd:95:17:42:
3b:c5:72:8d:4c:de:2c:ef:ad:83:dd:1c:52:92:6d:
41:f3:cf:d5:c3:10:10:da:55:0a:08:8a:85:bb:a8:
08:43:5b:ee:2f:b0:9b:a4:ce:f6:89:8e:38:a9:0d:
bc:2b:5f:3b:98:8c:e1:98:94:10:f3:96:0b:e9:11:
19:54:18:b8:86:07:a4:4f:4f:5f:3e:75:1d:24:30:
a2:56:97:65:d5:fa:bb:71:ca:ef:6f:e8:c9:31:92:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:21:4A:61:89:71:FB:8F:11:A8:AE:51:05:F5:E9:2E:18:16:22
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:7f:64:72:f1:ad:47:b8:4e:75:22:6f:6e:7a:89:1e:80:
51:85:64:07:46:f2:ba:ae:44:b4:45:d4:83:25:af:56:4f:4a:
57:63:a6:0c:95:13:d4:90:4b:3a:df:61:0d:9f:6d:fd:f6:0a:
57:18:e2:c0:fd:d9:66:72:86:43:41:b8:23:2b:48:90:6d:ef:
03:ec:4b:89:03:f8:6b:c0:41:e4:ce:cc:a4:26:9b:84:c4:02:
6d:5a:20:ae:52:b3:a9:52:dd:0e:1c:ef:54:ea:49:97:b5:ac:
6a:8d:4d:6b:b4:03:36:0c:a6:1f:c5:fe:20:d1:66:ea:7d:5d:
66:07:18:a2:2a:71:bd:a5:e3:50:a8:9a:c4:82:ef:54:b2:b1:
4f:bf:f0:cd:2d:d5:ee:19:dd:30:1a:19:de:71:4d:9a:12:82:
b2:c8:88:25:7d:f1:a2:56:53:41:47:17:45:54:c6:21:f7:0e:
b9:07:16:61:f9:05:ce:ee:d3:f1:d5:a7:67:7a:0f:09:86:ef:
76:71:00:4e:15:1c:90:f8:9f:19:07:b6:50:64:31:28:4b:f9:
a0:56:ee:ba:f0:23:8c:be:e8:61:aa:b0:0d:5b:2d:d4:c0:f9:
4b:bf:e0:19:4e:b3:1a:a0:94:03:74:48:5b:a3:71:66:cc:36:
00:3b:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:58 2025 by rpki-client