Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: sIcq97ddykeJwvmSOJkOtDrvLbs5uFN752Zc1fodfpI=
Subject key identifier: B5:D6:05:94:42:B6:16:E8:44:14:F7:69:13:7C:BC:17:F2:12:95:64
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 01984966A6A95C60E364FEFDB3B5BDBB7E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 02D2
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: ZyZGPRZ9292vvYy/HeAXSzWkxNAlE2Pn7Wxgq8dPqR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a6:a9:5c:60:e3:64:fe:fd:b3:b5:bd:bb:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=b5d6059442b616e84414f769137cbc17f2129564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:b6:53:33:99:2a:47:ea:b1:96:a6:5d:b9:
58:66:99:d5:77:1a:11:ed:0c:1f:b0:ed:fc:d5:39:
00:38:ba:5f:b9:47:52:3a:e5:2b:ef:b3:1b:11:2c:
54:2a:20:d8:d6:7b:23:89:14:7e:67:ad:1a:e9:bc:
7e:5e:48:8b:6b:aa:f5:ce:92:51:f9:f0:dc:7c:9f:
94:aa:a8:e4:ee:d2:c0:b7:ac:10:d7:f9:f1:9b:0f:
13:97:2a:7e:fc:30:a8:4d:5a:03:14:bb:64:25:cd:
16:22:ad:ae:d2:22:4c:7e:fa:13:83:86:04:50:9d:
73:7a:15:e4:00:9b:f7:65:d0:12:0a:ac:44:89:bc:
2d:e6:c2:d1:cd:2b:b7:57:67:a9:32:32:78:8d:4d:
f3:ee:80:91:ac:7b:2c:c3:f8:e5:4f:74:63:9c:5b:
00:89:a2:ea:b6:a3:d0:c6:7c:b6:41:05:81:43:47:
50:52:9f:6b:d3:78:08:9d:bf:4b:8b:0a:15:1d:6a:
78:14:10:b9:b4:f6:06:a8:c6:9e:78:ce:6a:78:f8:
33:3f:85:6d:28:0b:a9:7c:e9:26:96:cf:1a:33:05:
f1:8a:15:b4:c3:49:53:54:34:3a:7e:74:db:13:15:
cb:c8:94:04:d9:94:27:87:88:c0:4b:08:55:71:16:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:05:94:42:B6:16:E8:44:14:F7:69:13:7C:BC:17:F2:12:95:64
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fc:05:17:c1:fc:8b:46:50:68:7d:2a:3c:48:31:d7:b6:1c:
14:ae:92:b0:fd:ec:2e:bd:2b:5b:72:51:cb:1e:d9:bb:b9:ca:
de:ae:80:02:70:ab:1d:3f:06:d6:5c:77:42:20:82:d7:3f:2a:
b0:05:25:70:f1:5d:07:ac:01:8e:f2:e1:81:1f:8f:fc:02:ed:
f2:04:c1:dc:a9:8d:3b:6c:27:4b:30:37:78:31:28:cd:fa:74:
1e:a5:0c:59:b9:47:1b:fa:f4:ca:44:33:ca:14:42:a3:f9:54:
a7:47:bb:f9:94:a8:b0:d0:46:91:f0:cc:ec:73:47:ab:65:a1:
8c:8d:9d:6d:42:6d:d8:28:a0:35:f3:b3:c8:69:64:b8:5c:71:
5e:46:db:4e:20:4f:3e:07:4e:04:aa:c9:3a:93:1c:f8:f6:b5:
a1:d8:f4:5b:49:14:82:17:9b:8a:40:ac:59:ee:b0:1e:09:b6:
a0:46:34:40:b7:98:0c:8d:4d:f1:b5:b8:4d:92:1c:bd:d2:81:
c9:16:8a:5f:d1:51:45:4e:37:b7:89:10:f2:5e:4c:2a:4d:ec:
a6:d8:9f:ed:e6:49:eb:a5:26:04:f3:3a:2a:48:60:fc:db:b5:
1a:8d:62:e1:2b:67:2e:51:c5:92:b4:f0:f1:a9:82:a2:34:6d:
dc:f3:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:42 2025 by rpki-client