Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File: U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier: w/hzRhQgsukwLljB5VhwFaTHULmZZec26BvjN3nXshM=
Subject key identifier: 5D:6E:3D:F5:F2:16:C7:23:28:FD:F5:5A:5A:DE:2C:6D:1A:3C:A3:B3
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial: 0198432C7738BACD074BDF9F6FEBB9F9B60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number: 0920
Signing time: Fri 25 Jul 2025 20:00:44 +0000
Manifest this update: Fri 25 Jul 2025 20:00:44 +0000
Manifest next update: Sat 26 Jul 2025 20:00:44 +0000
Files and hashes: 1: GElfZUdAswtbdoNaPOGRm8XpaWY.roa (hash: b5qfHhhZZHZGLXy+05lWxwTJ5wt7TeKlj7sc65TvLms=)
2: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: 2PFFB/YotYTvM7ezrsyOhI3XiD+b5gzHNAoxjNu/5aw=)
3: g-5hPmoz7dP3nMeNf-8zyzCBLS0.roa (hash: 3ADI/JnmU2jWCSq5Oyp3ZfW9QGg96OokVA1qdrppkBI=)
4: uldn70CmsoO8mEjXDA2qsH171BM.roa (hash: sF3Le5y5D/xahF9JJgZ52rEEuG9V89PoQt2h37YZGwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:77:38:ba:cd:07:4b:df:9f:6f:eb:b9:f9:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Validity
Not Before: Jul 25 20:00:44 2025 GMT
Not After : Jul 26 20:00:44 2025 GMT
Subject: CN=5d6e3df5f216c72328fdf55a5ade2c6d1a3ca3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:0c:32:a8:94:ce:96:83:0a:48:75:b1:cc:
64:49:37:32:34:92:42:04:61:c9:8e:df:e9:26:7a:
8e:9d:45:5b:ad:a6:bc:15:8d:06:2e:76:24:fd:2c:
05:46:da:53:87:02:39:be:f7:26:19:ec:81:84:77:
51:68:43:b7:b4:7e:36:1e:cc:11:73:61:a6:4d:3c:
1a:01:70:ef:72:2a:27:fb:d4:7f:79:5f:75:88:b7:
43:e7:77:77:b2:41:7e:6b:39:91:cf:0f:1f:a2:13:
12:9d:57:e4:37:46:af:b7:dd:1c:e5:08:b4:ee:d1:
55:74:12:5c:62:a8:ff:4c:03:cf:bd:60:1e:14:f1:
af:28:79:14:0f:43:0e:ba:c5:a9:4c:50:3f:a7:55:
1f:53:6e:e8:87:32:d5:fa:56:e4:d1:cb:fb:9d:70:
11:55:24:1e:e7:aa:b5:d3:91:95:98:6c:57:2f:1f:
ca:50:02:37:7b:7a:f7:2c:6f:9c:00:2f:42:53:93:
45:cc:70:71:a0:80:5b:3c:77:58:ef:b0:84:7a:0f:
99:e8:b2:d4:f3:07:39:75:dc:06:21:0f:95:b1:15:
de:9e:4f:a0:83:05:7c:25:74:8e:b3:ec:12:57:09:
be:05:11:20:c1:13:7c:fe:7a:6b:53:0b:e3:d8:96:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:3D:F5:F2:16:C7:23:28:FD:F5:5A:5A:DE:2C:6D:1A:3C:A3:B3
X509v3 Authority Key Identifier:
keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6d:5b:6a:6c:0e:1f:f4:cb:da:e1:51:ca:73:ee:81:26:cd:
3a:72:6d:46:cb:70:19:f3:76:af:e9:57:3b:75:5d:45:f3:4b:
f5:e7:2c:5a:67:e8:45:07:88:b8:df:d2:42:4c:84:33:59:4f:
e8:83:7d:db:12:f6:d7:46:73:6e:54:16:14:29:c6:24:a4:27:
2a:fc:57:75:12:02:26:9c:43:ff:6b:0d:f5:69:3e:18:97:48:
f4:54:2c:6e:a7:36:d6:b3:55:2b:af:d7:5d:13:c3:d1:1c:d7:
f9:46:80:16:87:28:35:45:bf:3a:4b:cb:26:f5:85:02:23:af:
9a:a1:bc:fb:69:6e:2b:53:83:fd:7f:7e:1b:77:fd:fb:e2:1e:
b6:6d:26:2a:11:7d:21:0e:93:57:19:93:34:c2:4a:ee:d8:bc:
fa:ac:a6:c5:29:c9:46:db:20:be:3b:49:99:d8:40:be:f5:81:
0e:e2:28:6c:c3:cf:79:69:ba:82:7a:1b:54:e5:09:e5:22:f2:
87:cb:cf:e2:4d:5a:96:7d:bb:59:c5:fb:14:7c:2a:aa:d3:a5:
76:d7:47:6b:15:ae:fa:0c:16:22:7b:51:c2:fa:c2:45:4c:22:
85:b6:b0:41:b5:99:54:3c:07:21:a2:64:78:f6:8a:6f:ab:f1:
55:74:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 03:46:48 2025 by rpki-client