Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
File: U1zc9HjqgOsXXEwwd-efy3DF0jA.mft (raw, json)
Hash identifier: esaIT0Z8QJmqHqPV2dDsYKLIa5lBe9NBZBiy3H1V+uo=
Subject key identifier: 2F:95:F3:A4:4A:86:A3:FD:64:12:A0:F3:67:4E:73:C6:62:4D:FE:4A
Authority key identifier: 53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
Certificate issuer: /CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Certificate serial: 01984B53536F3F5193FAFB2DC2117E186718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
Manifest number: 0A59
Signing time: Sun 27 Jul 2025 10:00:08 +0000
Manifest this update: Sun 27 Jul 2025 10:00:08 +0000
Manifest next update: Mon 28 Jul 2025 10:00:08 +0000
Files and hashes: 1: U1zc9HjqgOsXXEwwd-efy3DF0jA.crl (hash: 4mQWtRQgVtJ7TVwbQ42XKEY31niAMp4eevXZMe3ySEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:53:6f:3f:51:93:fa:fb:2d:c2:11:7e:18:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Validity
Not Before: Jul 27 10:00:08 2025 GMT
Not After : Jul 28 10:00:08 2025 GMT
Subject: CN=2f95f3a44a86a3fd6412a0f3674e73c6624dfe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:f1:85:1a:be:c9:01:74:9c:21:eb:51:4c:
ca:b0:d1:7c:7c:83:01:a9:2b:80:7e:ae:db:22:6e:
af:9a:ee:22:d2:11:b5:ca:29:d7:81:7e:4c:2c:2c:
9d:cb:3a:cf:d0:ee:03:c0:36:b9:3c:6b:c4:2c:2e:
41:a7:86:d9:9b:42:a6:49:a9:dd:f1:05:17:30:77:
05:76:00:1a:02:7f:7f:54:f5:5a:8e:68:7e:08:fd:
ce:d9:df:9a:5a:6e:87:95:d7:9f:b3:8c:82:16:b0:
b9:61:d7:6b:a9:fe:45:ff:10:bb:a0:09:36:77:5e:
ed:f4:13:ad:11:3e:35:e4:50:97:20:19:05:4e:cf:
d2:37:6a:f6:2f:f8:78:94:66:18:84:a1:1f:57:ad:
bd:f1:3c:5c:81:8a:5b:47:ef:61:3e:00:dc:3b:ec:
4f:62:2e:a7:6f:11:69:d4:8e:7b:98:47:15:37:5c:
5e:f0:37:a6:f2:d9:c0:c1:7b:62:2b:05:ff:98:fd:
dc:dd:c8:1e:db:fc:72:c9:1d:19:6d:c4:ec:15:f9:
a8:9f:b2:83:28:da:ed:15:2f:a6:23:84:0c:23:a4:
99:51:2a:8e:fc:a6:24:fd:b8:e8:c0:73:a6:4f:c9:
e3:13:fe:7d:e1:4a:77:e7:bd:7a:c1:55:72:8c:fe:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:F3:A4:4A:86:A3:FD:64:12:A0:F3:67:4E:73:C6:62:4D:FE:4A
X509v3 Authority Key Identifier:
keyid:53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:56:c9:fa:7e:c7:7a:fa:c2:19:e8:e7:37:ee:1e:27:c2:43:
74:fd:96:01:10:fe:68:10:2d:6b:9c:57:88:51:c6:29:d1:96:
c8:84:ca:6b:47:17:6b:67:b3:5c:d4:1c:eb:2c:08:34:f9:e9:
8c:59:57:43:10:94:0c:5e:c4:52:4d:11:b6:5e:89:5a:9e:55:
d4:01:b1:9d:42:37:0d:c2:ac:90:b9:49:25:8f:90:ea:15:10:
78:b2:c0:4a:90:32:88:8f:42:11:91:cb:65:79:89:b5:53:75:
5b:81:72:ff:48:a6:b5:e8:a9:7e:b2:15:82:d4:ff:aa:76:a1:
92:e0:07:85:4e:ab:10:75:64:03:22:d9:1f:a7:a0:47:51:11:
09:c6:b0:ad:ac:74:30:6b:23:e9:38:b0:46:06:c1:de:70:cd:
38:7c:36:30:97:04:d4:95:64:38:0d:c0:1f:9f:03:6c:b5:1e:
32:22:e6:37:08:89:32:9c:09:47:03:c1:c0:06:81:fa:70:f2:
25:8f:22:a7:0b:1a:3f:2d:c3:10:3a:ab:a4:10:1c:a3:41:ca:
a2:15:c0:12:c2:ca:c7:ef:40:91:0a:d2:34:02:38:04:b2:f0:
35:32:d2:1b:c2:9f:ab:63:0f:5e:b5:47:b7:33:1c:d0:f5:d2:
ac:55:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:42:30 2025 by rpki-client