Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: cLhkpdwN7WF6k+eFLf9MC7PSnTiCFT1VcbNlAeoQUNg=
Subject key identifier: 97:44:4C:02:E1:CC:AE:16:B9:60:5F:72:A3:B8:F6:F1:A5:EF:E4:6A
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 01985AC854AFCE7272E9B89250A2ABDB0853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 1150
Signing time: Wed 30 Jul 2025 10:02:15 +0000
Manifest this update: Wed 30 Jul 2025 10:02:15 +0000
Manifest next update: Thu 31 Jul 2025 10:02:15 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: 9h3mluo0C3uQWKxby5yyJnjntZIwcNHVuikuiGkJUVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:54:af:ce:72:72:e9:b8:92:50:a2:ab:db:08:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jul 30 10:02:15 2025 GMT
Not After : Jul 31 10:02:15 2025 GMT
Subject: CN=97444c02e1ccae16b9605f72a3b8f6f1a5efe46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:b2:c7:ff:39:73:ef:10:83:65:1e:d8:06:
bc:40:d2:74:19:32:b4:53:63:ce:c6:b6:83:d4:b7:
e9:4a:4e:6c:bc:6a:8a:64:74:94:ea:c9:08:0b:3d:
ae:57:33:fc:dc:66:fd:14:23:ff:61:d2:68:d7:14:
a2:3e:0e:fa:68:9c:68:27:24:5a:df:82:28:ef:60:
cf:13:c7:28:7f:c3:dc:38:e8:a1:1a:e5:62:e5:10:
e6:c9:33:6d:5e:08:ff:2b:12:94:73:71:74:7f:04:
cf:65:ba:45:08:86:66:1a:9a:03:80:e7:d2:99:6c:
06:37:75:76:65:3c:a6:de:9e:2b:ea:bc:e2:4a:8a:
e6:6a:0d:e1:e2:0f:36:13:03:19:23:c9:09:18:04:
94:cf:00:83:42:cf:02:27:75:8d:33:76:be:77:2e:
3e:48:e1:fc:e6:c7:ef:f1:01:46:16:d5:90:06:c9:
da:25:d6:10:03:8e:31:63:cd:0d:c5:22:61:73:a9:
44:a0:e6:80:60:9a:31:3a:a1:6a:1b:74:fc:ab:b2:
d7:3a:c8:b1:7b:f2:82:04:eb:b0:04:5f:35:6f:f9:
f5:ed:4c:93:4d:c0:1d:6d:27:83:82:3a:cb:73:5c:
59:86:9b:91:2c:2c:c5:c5:43:a5:cf:ab:ab:4e:83:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:44:4C:02:E1:CC:AE:16:B9:60:5F:72:A3:B8:F6:F1:A5:EF:E4:6A
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:1b:e0:64:3e:6a:0a:eb:c5:2e:ec:a0:b9:f0:e6:50:d6:
4a:f2:3d:f5:47:7e:88:5d:ac:10:8b:ed:df:23:80:1c:83:d3:
39:f2:1a:bc:47:32:3d:37:47:8a:65:2a:52:54:2d:46:b5:7d:
9a:65:f3:b5:1c:b3:af:48:64:38:16:00:e8:e2:8c:69:07:c7:
57:18:39:aa:40:52:a2:1c:fb:2c:f8:e8:3a:86:17:59:03:3a:
53:91:77:ca:d6:6d:34:17:28:00:24:06:fa:b6:a5:95:40:d8:
5f:30:04:6c:c3:1d:0e:c6:b8:bd:c6:17:20:3f:dd:60:05:85:
ac:b5:cf:e5:bd:ff:74:df:2c:06:69:d7:5b:57:7c:df:c2:26:
f3:a7:39:e0:9f:a8:ba:88:3e:74:c4:47:f5:68:e2:00:a7:2f:
36:ac:31:a5:ff:46:d3:c3:a6:d1:fe:81:83:6b:48:00:50:26:
49:ea:77:d5:57:91:b5:f4:16:fd:24:c2:d2:12:a9:09:d4:cc:
88:54:de:6e:c3:56:83:b2:3a:c9:9a:e3:a0:99:4c:4e:9a:7d:
f9:c0:bd:68:4e:6a:a4:83:e8:aa:4f:90:d1:a3:6d:d1:5c:3c:
ab:95:93:87:3d:6b:37:dd:c8:7d:18:e2:03:aa:fa:46:89:73:
82:a7:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:41:23 2025 by rpki-client