Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: tHcP3G2PRf5EceSa43Ev58pRjKrJjBKAbWzPV8CqSAk=
Subject key identifier: 58:1B:34:1C:CB:0B:60:BD:F7:55:C0:0E:F6:C5:06:72:BD:44:D6:AB
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0198530E46EC40FF23C620B04B5D20878E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:01:41 +0000
Manifest this update: Mon 28 Jul 2025 22:01:41 +0000
Manifest next update: Tue 29 Jul 2025 22:01:41 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: fCeKEBm5AznBJg9LdO3EXZ7ohDAMPvy2Jw3dXcZ7DoI=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:46:ec:40:ff:23:c6:20:b0:4b:5d:20:87:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jul 28 22:01:41 2025 GMT
Not After : Jul 29 22:01:41 2025 GMT
Subject: CN=581b341ccb0b60bdf755c00ef6c50672bd44d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:27:d6:ba:cb:a0:9d:01:0b:66:66:ca:93:
fc:7e:fb:db:cd:2f:23:d5:7b:7f:8c:4c:33:32:7d:
98:28:db:29:e7:a5:6e:e1:ec:21:c4:e0:52:11:ea:
1e:ac:2f:b1:c2:9e:2a:27:d2:6d:7d:e8:bd:61:fd:
56:15:40:58:c6:32:61:61:0b:40:b6:f2:49:0e:36:
70:bf:7f:11:0c:5a:0b:22:b6:42:e5:90:be:61:ef:
cf:a7:fc:4c:ab:0f:40:c6:4a:64:5f:d3:2b:73:78:
4d:c2:fe:54:ca:38:48:b8:ee:ab:3d:7b:62:2f:9a:
30:31:f3:e5:3d:76:4a:39:1b:2b:45:5a:05:af:ca:
3d:eb:e0:45:f9:0d:1a:6b:b7:54:a7:d3:0c:62:04:
0d:52:3c:64:d0:19:0c:2c:ba:df:b7:90:87:c0:84:
e6:bc:68:0b:c2:ed:90:f5:0e:24:91:f8:f5:4e:f6:
a1:f9:2c:d4:a8:ad:ed:5d:a3:58:31:f5:8b:21:fe:
0d:21:ed:9c:2f:d0:12:74:6d:c7:bd:1e:ab:93:b3:
ef:70:f4:13:d7:d1:18:7d:2e:4e:04:b1:f5:8e:cc:
32:5b:17:c1:87:be:f5:3b:f3:85:0d:5f:c1:57:f5:
85:93:91:a6:25:6e:a7:a1:44:ff:c3:3b:88:37:42:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:34:1C:CB:0B:60:BD:F7:55:C0:0E:F6:C5:06:72:BD:44:D6:AB
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:88:f0:25:44:4a:1d:8b:bd:8c:04:48:97:65:04:a0:59:
94:ca:8b:89:92:56:6d:9c:99:66:da:de:ce:d3:7d:af:79:da:
f5:8f:30:ca:f4:65:5f:c2:c4:b4:f6:28:85:7a:a4:71:80:ff:
19:b9:1b:2a:24:76:a2:22:4d:94:2b:7d:96:0f:8d:eb:fa:7f:
ae:25:42:aa:4a:5c:51:05:42:26:8b:5e:ff:ce:47:2f:49:07:
41:72:29:b0:93:c9:87:34:4e:ca:e5:0e:6f:c6:6e:72:07:c8:
a4:99:63:ae:bd:bd:1e:a0:79:78:ce:6a:ec:6c:c4:e2:3e:13:
d7:13:5e:f4:66:69:e6:7a:6f:12:b4:96:b0:b9:af:fd:68:83:
b5:bd:92:56:f9:6b:73:cd:9b:39:5b:b9:5c:84:a1:09:9a:fc:
76:0a:74:39:c8:43:2e:83:db:a8:a6:15:4c:11:c4:8e:15:d2:
85:be:8e:cb:79:b7:32:51:3b:ca:0c:2e:95:e8:6c:6c:3b:23:
92:2d:c8:2a:ab:dd:58:2c:2b:3f:da:78:8f:3b:5c:5a:29:3b:
ef:9f:4b:b5:7b:41:1a:1f:39:9b:81:49:b4:8b:be:85:87:e0:
7b:fa:a1:f3:a8:d6:4f:5f:b4:f0:13:34:95:17:97:d0:2d:fa:
92:ff:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:24:10 2025 by rpki-client