Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: mgx6cjQncbPDYpoM/AvPG1vjPC/V9UIkCvaEOtL7KA4=
Subject key identifier: 53:03:C6:6C:28:A9:DB:EC:53:98:44:8C:EC:C0:EE:C5:9A:81:67:4D
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0198462D9AADAB0BAC7797552839BBB8A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0CCD
Signing time: Sat 26 Jul 2025 10:00:50 +0000
Manifest this update: Sat 26 Jul 2025 10:00:50 +0000
Manifest next update: Sun 27 Jul 2025 10:00:50 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: q5drf5uDzlR2OwJnByx/7SQ395zA/CaaWvAvjOIwFFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:9a:ad:ab:0b:ac:77:97:55:28:39:bb:b8:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Jul 26 10:00:50 2025 GMT
Not After : Jul 27 10:00:50 2025 GMT
Subject: CN=5303c66c28a9dbec5398448cecc0eec59a81674d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:3d:fd:24:13:7f:ab:88:21:e8:31:24:44:
d6:00:d7:f1:44:99:59:7d:54:a1:74:56:c4:80:e7:
78:92:6d:21:05:d9:dd:76:93:f3:cc:dd:87:24:ec:
3a:e7:91:0f:28:bb:c1:5a:d9:64:a6:3b:60:70:9e:
ec:77:8c:bc:6d:54:2e:3c:cd:8c:29:06:98:27:35:
52:ce:71:d6:33:03:b7:e5:86:01:93:de:c4:00:0c:
2a:3e:8a:e7:35:31:ee:b6:2c:7e:96:aa:c2:d7:23:
f2:18:8f:05:cf:ea:1a:13:a7:3c:26:51:f8:80:22:
26:c1:cc:8c:8d:2c:6c:7f:2a:c3:f3:d9:11:c0:23:
7a:e7:b2:27:d8:e2:e8:33:76:7d:3c:61:6f:4f:f4:
bd:cd:9c:5a:75:07:cf:9d:6b:0a:92:da:9d:c2:f5:
8f:56:09:76:6d:fd:0a:eb:ed:46:dd:03:a0:b9:76:
4e:b1:4a:3d:67:cb:b2:10:42:28:27:52:32:f8:12:
1e:01:a7:2f:8e:b4:e0:ea:f7:d0:b3:9a:e1:d7:c3:
87:0c:ae:79:98:ca:f6:67:74:13:26:cc:4a:95:f5:
0d:28:6a:12:ec:bd:45:20:99:a7:46:43:35:fc:db:
cf:99:63:7c:a3:74:ac:c1:32:94:d9:06:a1:14:32:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:C6:6C:28:A9:DB:EC:53:98:44:8C:EC:C0:EE:C5:9A:81:67:4D
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ba:40:8b:35:38:1b:c8:60:6e:73:66:25:d2:d5:35:ff:84:
3b:d6:dd:2f:a6:21:81:6f:db:a5:d8:14:62:6d:28:4e:52:b5:
3a:0b:b3:d3:2b:96:07:a8:5f:d4:76:fa:58:38:ba:4d:03:52:
24:58:56:12:d7:f3:cb:49:14:88:7e:d3:bc:4b:b8:b5:00:cd:
36:ae:c9:24:da:9e:f8:d1:a4:e1:08:49:29:f8:11:dd:c0:70:
cb:93:b5:0e:54:74:61:25:2c:25:24:e0:9f:cb:b0:41:f4:e3:
25:c9:83:00:58:7c:cb:dc:02:7d:a2:f4:8b:5f:29:bb:09:84:
07:0b:f8:89:2a:cb:51:db:42:91:82:1c:0a:1d:95:d8:58:c0:
2f:97:fa:b3:1b:93:b7:e8:bf:d0:b9:32:1c:b8:6d:69:be:1d:
38:2f:26:1f:3d:37:9c:62:5b:5a:c1:b0:e3:1c:07:90:4b:7e:
35:66:f3:80:8f:60:d4:af:dd:23:c0:49:45:18:11:1f:f4:1d:
73:60:84:d7:35:ce:90:f5:19:9a:e6:9b:dd:25:b5:42:8f:9c:
b7:9b:c1:d4:4e:8b:ff:c7:2e:88:f6:28:cb:08:3f:46:6b:ce:
55:57:54:76:c1:85:7d:04:ce:96:3e:3c:14:6f:2d:1c:4c:b2:
3a:79:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:18 2025 by rpki-client