Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: QZfP2yer0dKwzfCDPsvsdhK+M53La+1ZGbIaIgSG8wY=
Subject key identifier: 07:4E:7A:2C:09:B9:46:AC:FD:80:BE:2F:94:19:42:B7:D3:1D:91:A4
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 0198364CC18159A1C286A51D72136A8DA9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 083C
Signing time: Wed 23 Jul 2025 08:00:56 +0000
Manifest this update: Wed 23 Jul 2025 08:00:56 +0000
Manifest next update: Thu 24 Jul 2025 08:00:56 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: ksTQ/gD1zD3OVmKf+4LZe+k6w1inkb6FT7Y0SuwWmzE=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:4c:c1:81:59:a1:c2:86:a5:1d:72:13:6a:8d:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jul 23 08:00:56 2025 GMT
Not After : Jul 24 08:00:56 2025 GMT
Subject: CN=074e7a2c09b946acfd80be2f941942b7d31d91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:2e:33:5a:32:ef:39:2a:65:4c:40:e2:2e:
0f:9a:54:ca:48:3b:0b:f1:47:9d:ba:df:fc:f2:d3:
b7:9a:63:db:af:92:0c:ea:53:9f:d8:3c:58:0b:c1:
3b:d1:7e:51:70:b6:56:0c:bd:6f:b9:26:1b:dc:10:
7f:10:8c:2c:16:b2:6a:f5:a9:39:34:5c:cb:d3:a4:
d9:58:81:b8:f6:49:6c:83:6f:ee:c2:a0:7c:e8:60:
e6:18:c3:e1:eb:c1:30:90:72:d8:20:33:8b:fd:8b:
1a:e2:61:2c:a2:75:29:c9:e2:63:32:91:e9:c6:6c:
85:bd:73:5d:17:15:1f:df:b5:e3:fe:a8:13:3c:19:
fc:56:14:3b:42:65:c9:cd:56:5c:3e:d4:dd:d7:c4:
e0:de:07:3b:36:0e:f4:b1:55:c8:ee:54:e8:55:74:
c9:5a:29:d0:15:9e:9a:9e:19:f9:67:4e:a5:97:1d:
49:e9:3c:15:20:19:78:3a:a2:2f:46:da:28:5e:c4:
a0:e3:25:da:7f:63:f7:58:40:06:a4:9d:c6:7c:56:
42:05:a8:07:97:28:6a:e2:9a:3b:d7:04:4f:16:ab:
0a:9c:79:47:88:e1:e6:73:0d:96:ed:43:46:bd:fe:
e5:a8:f5:04:c3:8a:c8:e6:fa:ad:50:b5:1b:ad:99:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:7A:2C:09:B9:46:AC:FD:80:BE:2F:94:19:42:B7:D3:1D:91:A4
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:03:36:f7:2f:7c:11:29:28:e9:4f:d9:63:d3:1a:77:5b:
48:e8:6b:8d:06:0c:09:be:6d:ce:ef:e9:96:99:9b:44:9d:0e:
e8:10:48:a3:5f:58:c9:4f:41:91:be:d6:0b:70:e1:55:54:60:
b0:25:97:5d:0b:ec:ca:06:3d:ab:15:e2:3f:2f:dd:11:cc:e4:
f9:fc:71:5b:8c:21:d7:b4:49:8e:6b:06:8a:1a:0d:de:de:94:
1e:a3:d1:65:3a:d8:96:76:a6:98:c0:55:0b:4b:04:f6:6b:18:
40:38:d3:51:a3:9a:77:d9:f8:55:ff:a1:69:be:74:b8:95:74:
7c:b9:e9:df:23:88:bf:b4:c3:7d:c4:3e:0a:2a:17:07:71:f3:
13:a8:dc:a4:5a:a8:54:29:21:d6:f7:78:1a:cb:a8:b5:fd:a9:
14:66:2c:aa:4b:97:c1:92:18:02:95:1e:75:91:3b:d1:e0:05:
e7:80:f4:70:8b:61:ec:9c:f7:17:22:74:6f:07:a6:92:76:94:
63:69:20:d6:03:24:9a:e2:96:5f:8d:64:56:5f:7e:2c:4f:f9:
5b:50:e2:06:dc:a7:6b:99:5c:e0:4a:b2:fd:21:af:6e:cb:73:
63:73:b8:0d:a3:f7:61:d3:60:0a:0e:53:bf:ee:6f:14:ee:4f:
ad:0b:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:55:51 2025 by rpki-client