Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: UuTszmwR/TvLHuW2twOZYNK7uJxCNleSNWkIpsNTDKA=
Subject key identifier: B8:03:19:A0:87:AA:67:E7:E9:70:A5:1A:5F:D6:AF:B6:FA:B7:7F:76
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 01984589832DF115EC07CF60D6A81BD9DFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 07:01:36 +0000
Manifest this update: Sat 26 Jul 2025 07:01:36 +0000
Manifest next update: Sun 27 Jul 2025 07:01:36 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: BVgp43fnBqBYdEmsLSOrmw3k5a+NX/bO4kfDe5joMVg=)
2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:83:2d:f1:15:ec:07:cf:60:d6:a8:1b:d9:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Jul 26 07:01:36 2025 GMT
Not After : Jul 27 07:01:36 2025 GMT
Subject: CN=b80319a087aa67e7e970a51a5fd6afb6fab77f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:85:e4:99:73:df:68:d0:f3:ad:42:e3:2e:
0b:0c:4e:94:98:b7:45:6f:2c:c0:86:0a:dc:5f:91:
42:37:67:c0:dc:1c:0b:54:fe:2c:b0:24:4c:7e:4e:
f9:1d:ab:1c:96:d9:1e:4f:1c:e6:b6:4a:0c:a4:12:
e4:90:09:85:67:3d:00:ef:a8:0d:40:58:d3:9a:73:
24:79:35:44:d6:99:6b:ff:35:d6:85:96:57:c8:f0:
c6:62:16:93:3a:1e:53:d2:4e:84:37:00:68:87:c0:
04:b0:b2:d3:09:92:46:39:3e:d6:26:6a:6d:c4:7e:
d8:c7:b8:5c:1a:eb:be:fc:6d:0d:b4:5f:2b:9f:64:
dd:a8:5c:77:5a:5a:f6:67:7f:f7:d3:6c:3e:eb:dd:
bb:a7:a3:68:2b:15:bf:3a:02:13:e6:34:ad:4f:5e:
1c:df:d3:5d:36:f6:3f:81:81:2f:6b:63:68:1e:05:
9a:c1:2b:88:cf:82:a9:25:77:05:b1:63:12:f2:5b:
0b:a2:22:44:e7:1b:ac:d9:c4:fb:4e:41:38:87:c5:
c4:93:9d:41:fc:a9:f4:ff:d3:04:76:94:2d:d6:a5:
39:f1:31:79:72:06:f4:57:3f:ea:52:67:52:20:53:
d5:ae:03:90:66:79:09:38:62:8a:f4:dc:72:f0:aa:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:03:19:A0:87:AA:67:E7:E9:70:A5:1A:5F:D6:AF:B6:FA:B7:7F:76
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0a:51:55:ec:fb:f0:2b:4e:51:11:4d:b1:0f:5b:ed:b6:59:
1b:ca:96:61:29:68:db:3b:95:18:89:62:c5:7e:24:2d:32:19:
76:5e:3c:65:c2:8a:5b:6c:73:b8:2e:25:f1:b3:50:14:7e:7f:
cb:c2:f1:7b:4a:36:51:f4:af:82:0b:11:8e:e9:3f:3f:63:c6:
93:01:cd:f2:a2:d8:d7:cf:16:54:e0:a6:6f:ce:63:cc:83:03:
1f:5d:0e:03:91:30:65:e7:de:33:f9:e8:62:4e:3a:25:d5:b0:
e9:4d:59:59:07:b7:9c:25:ca:9e:cc:f8:c0:d5:cf:1b:eb:91:
f9:5f:1c:14:5d:b7:be:53:26:c8:c3:d0:60:89:1f:00:40:8d:
fc:0b:e8:9a:7a:c1:72:54:5c:77:ce:81:5f:f2:09:34:97:b8:
02:e7:00:e2:09:c4:74:f2:09:2d:52:91:d5:1b:01:69:57:39:
4b:eb:68:a8:e4:7c:9f:bd:b0:09:9b:95:29:5e:1b:0a:fa:9d:
a0:26:b9:e3:9e:2f:aa:b4:71:a4:dc:9c:1e:19:7b:cb:39:8c:
6e:6b:fe:37:13:24:b4:6a:40:50:78:1a:9e:1c:6c:88:51:bf:
74:d1:c1:d4:62:b3:43:f1:34:4e:4b:56:86:f8:3f:fa:db:c6:
f5:94:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:30:42 2025 by rpki-client