Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: kRo/zuyz7h/4wzKfRnUVIvycINs7cclzFpHpZJn6/tE=
Subject key identifier: A3:DE:C1:41:D1:6B:15:68:BF:19:17:9D:82:AD:8B:A8:EB:72:C7:4B
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 01984708FD358B350EE22AA25DA4E99BAFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 14:00:28 +0000
Manifest this update: Sat 26 Jul 2025 14:00:28 +0000
Manifest next update: Sun 27 Jul 2025 14:00:28 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: CCwGl9fFNcCBf07FP/s0+XQ9h1IzKgVnG9Uc2ujqHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:fd:35:8b:35:0e:e2:2a:a2:5d:a4:e9:9b:af:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jul 26 14:00:28 2025 GMT
Not After : Jul 27 14:00:28 2025 GMT
Subject: CN=a3dec141d16b1568bf19179d82ad8ba8eb72c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:ee:8d:11:9b:42:b0:41:a5:02:03:d2:bd:
ae:d5:4c:49:c4:d2:30:e6:cc:a7:ca:78:ef:78:98:
b4:2e:2e:c0:1f:fb:7a:61:34:f1:a6:22:e2:e5:da:
e7:d3:55:f5:d1:51:03:6b:b5:93:51:cd:3e:0b:4c:
1c:f5:5b:2c:c1:d9:88:27:da:43:c2:81:9b:ad:56:
62:63:b2:6f:b6:f9:ab:07:b2:c3:ac:85:5d:1c:77:
ad:8c:2f:b7:4e:2f:d8:63:91:7f:8b:8d:4a:3c:ee:
8e:22:9e:f1:0e:d0:54:95:16:4d:c7:43:c1:97:48:
9f:77:e0:35:5f:46:4b:af:f8:ee:f3:9d:d9:0f:08:
fd:ca:ec:5d:db:80:4f:8f:65:6a:d5:9c:21:03:78:
fa:33:31:a6:88:ce:b4:f4:b4:4d:bc:1c:bb:e7:3b:
8f:6d:9a:e3:77:ed:3a:f1:c7:57:cf:be:2e:d7:64:
90:c2:fe:f6:bb:21:18:b3:75:05:f2:ee:9a:a1:c0:
24:d4:e6:3e:ff:54:1d:a3:d8:41:cd:b3:c1:d0:af:
fd:00:ba:c8:23:67:96:bd:fb:ac:b5:c1:91:25:0a:
1a:12:4e:c3:ac:20:14:b1:d0:13:ae:2b:65:6d:b8:
e9:f3:30:12:36:61:b8:70:94:a9:86:62:e8:01:1c:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:C1:41:D1:6B:15:68:BF:19:17:9D:82:AD:8B:A8:EB:72:C7:4B
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:36:7a:2b:8c:6b:89:88:64:87:6a:8c:80:07:90:54:8a:
a9:6b:2c:45:9b:9a:f4:b0:76:e5:cf:c9:e1:33:b2:ae:31:aa:
47:d9:fc:26:e2:b8:e3:95:55:fd:75:18:87:c8:0b:e3:54:7f:
88:65:e9:01:3f:9d:84:02:60:9f:2d:f7:0b:64:ed:90:5d:e9:
f6:89:22:bd:2d:ce:f1:3a:15:e9:06:50:c9:b3:ee:65:a6:6c:
82:9b:f2:30:e8:ea:ba:e2:9b:e2:2f:20:18:3f:af:33:b3:84:
b7:c5:b3:ae:27:03:96:ca:01:ab:3a:0a:d9:8b:c2:9c:e6:d6:
b6:af:75:b4:42:07:a3:ba:ce:79:39:15:12:b7:2a:a3:a3:fe:
e9:d8:9f:d0:2b:8f:4a:ec:40:5f:78:41:47:4e:43:64:f8:43:
89:b6:c8:d7:29:b9:53:ce:0a:1b:35:a8:51:7d:aa:bf:ad:9b:
fe:a9:ea:df:08:61:e0:0c:a6:25:22:2e:34:6c:ce:34:4c:e5:
9f:9d:2c:ee:12:58:64:09:82:fa:bb:03:43:5c:c2:74:47:5c:
b3:21:0b:93:9b:0e:ca:8a:d8:b5:61:ca:44:98:6d:0a:57:5b:
bd:5b:b7:15:ed:75:ff:55:7b:09:c5:01:61:2c:c7:7d:4b:b0:
48:9d:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:48:01 2025 by rpki-client