Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: Sxemo50jX8Aui5wmmsfWobpWG4h6rkvPGnABh7oqFUg=
Subject key identifier: AA:42:FE:2A:94:80:28:26:BD:4B:22:EC:B4:3A:65:1B:6A:74:F4:70
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019860FFDFF9D3CB5D212B48180757C9A4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 1610
Signing time: Thu 31 Jul 2025 15:00:38 +0000
Manifest this update: Thu 31 Jul 2025 15:00:38 +0000
Manifest next update: Fri 01 Aug 2025 15:00:38 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: zKf54Ajsdgl6h0xIi/lmshK3ReLKjQ5mz+ew5o9aqNM=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:ff:df:f9:d3:cb:5d:21:2b:48:18:07:57:c9:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Jul 31 15:00:38 2025 GMT
Not After : Aug 1 15:00:38 2025 GMT
Subject: CN=aa42fe2a94802826bd4b22ecb43a651b6a74f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:65:5c:d3:25:2d:3b:2a:f4:38:8b:d3:7f:
b3:4c:60:ee:a1:0b:91:e6:2e:00:8a:3f:f9:39:8a:
43:ac:83:46:f0:9a:1b:97:40:7d:37:0d:87:50:2f:
cc:42:7d:27:5b:f7:c9:37:83:35:c5:0f:b1:8e:de:
57:d2:ed:28:d4:ce:63:85:83:49:33:26:30:1b:28:
c9:b2:67:fc:76:69:59:d4:0f:f6:fb:63:74:a1:0b:
ad:a9:19:f0:c0:43:0d:e8:1a:bf:f5:10:7b:47:dd:
d1:8d:91:7c:eb:22:4e:aa:30:f9:d2:91:6c:57:47:
8b:13:b9:1c:cf:3a:eb:d9:2a:85:dd:bc:6d:f2:45:
ae:d8:2b:6f:f6:44:2b:4c:a8:cc:21:cc:9c:00:69:
57:d0:20:8e:44:bd:f7:77:93:ac:ef:f1:8f:88:5b:
49:82:74:53:55:21:19:7b:68:79:cf:eb:43:10:f5:
f9:3c:50:9a:2f:66:02:d6:4d:a6:dc:54:36:20:1e:
c4:42:53:b1:54:10:81:1e:85:9e:4b:85:3d:8f:db:
b6:d6:a6:3c:3a:e3:ea:5b:6a:f9:36:6f:c8:b7:7e:
ff:35:fd:3b:11:f1:f3:04:f6:4f:cc:aa:b4:50:09:
86:e4:88:4a:95:0f:13:a2:7f:d2:21:8a:23:0c:1c:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:FE:2A:94:80:28:26:BD:4B:22:EC:B4:3A:65:1B:6A:74:F4:70
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:57:d4:75:b9:2a:cb:99:7c:7d:8c:54:3b:57:6d:06:d2:33:
9d:96:0e:16:a9:7f:68:4c:35:91:33:8f:f4:03:ae:4c:d4:33:
d9:95:71:6c:51:0b:65:aa:4b:65:a0:75:a7:c0:d6:3f:64:74:
85:52:08:43:15:d1:9b:a9:a7:e4:07:9f:38:73:b2:73:ac:32:
9e:90:bb:b2:05:0d:51:31:da:e3:2c:cb:42:92:d2:c9:8d:86:
27:87:c4:b2:51:04:7e:59:b0:b8:3b:db:aa:dc:0b:ee:21:44:
26:f3:9c:ab:dc:ac:75:d8:5f:cb:0e:a6:a1:ba:a8:34:60:94:
7f:cf:92:cf:fe:f3:63:97:96:55:d4:29:7c:88:ae:a6:16:4c:
94:78:f6:86:62:0d:79:fc:02:ae:c6:56:4f:fa:56:13:a5:d5:
ca:4b:71:f9:d7:fe:33:7b:37:3d:69:65:8c:40:5d:81:14:08:
33:a1:6d:bd:42:e9:98:ca:b2:af:15:fd:a3:99:24:50:67:37:
99:3f:2c:a7:57:1a:17:9e:17:3c:21:a5:4a:10:25:31:17:5b:
2c:b0:33:ea:90:2d:c8:5b:8c:95:04:9b:1c:7b:ef:d9:75:ae:
c8:92:09:15:50:be:c1:6c:cb:2e:7c:35:23:99:2e:fa:a6:77:
8e:b3:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 16:23:27 2025 by rpki-client