Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: EOwPW45638Z5DgSX3N8RPcJe/w17J0Gvd5x2zIBA+qY=
Subject key identifier: 3F:E0:D5:29:AC:0F:5D:2D:33:A6:3F:79:B3:B8:D7:2C:8A:EB:4B:AA
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0198458998AAEA2F13C3132FE4342BAC67CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 10FD
Signing time: Sat 26 Jul 2025 07:01:41 +0000
Manifest this update: Sat 26 Jul 2025 07:01:41 +0000
Manifest next update: Sun 27 Jul 2025 07:01:41 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 5oqUgBAOr7b/Umq/xsnpwT5mphQocT4NfVgs6Pr/X5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:98:aa:ea:2f:13:c3:13:2f:e4:34:2b:ac:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jul 26 07:01:41 2025 GMT
Not After : Jul 27 07:01:41 2025 GMT
Subject: CN=3fe0d529ac0f5d2d33a63f79b3b8d72c8aeb4baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:ce:eb:0a:19:82:88:8c:f1:45:26:94:25:
b5:d4:9b:10:e5:10:a8:c4:41:ae:4a:d6:3f:01:04:
5e:b0:3c:af:4c:29:08:79:f2:95:ec:ad:50:52:e3:
f2:af:b7:c1:54:98:1a:b5:8d:37:04:01:ea:85:6c:
d8:e2:f3:c6:31:da:fe:f7:0d:be:7f:2b:dd:a3:ce:
65:b1:da:9b:8e:de:e3:c1:11:ff:14:c5:66:1f:80:
1d:e0:f6:57:85:a0:30:93:8c:eb:ef:b4:45:22:fa:
dc:3b:c2:ae:21:41:3d:f1:ea:60:e7:47:ca:2e:dc:
e9:bc:57:63:d0:3b:23:dc:bf:97:19:6f:21:b5:c3:
ca:2b:e5:88:d2:d0:59:54:dd:d7:d5:52:d1:e3:b4:
83:74:fd:21:49:60:64:6c:75:aa:fc:e8:ec:e3:fc:
8b:36:90:30:83:ff:e8:01:b3:ce:b1:ac:b8:cf:03:
ca:7b:de:f0:18:c9:6f:f5:8b:fe:76:4e:dc:13:68:
18:9f:9e:df:fc:0e:aa:a8:de:d8:35:b2:9b:53:dc:
8e:79:0f:af:d4:20:a7:6c:4e:d6:2c:08:5f:12:9e:
f6:80:0d:42:60:e0:59:b5:53:5a:89:0f:1c:4b:2a:
79:ca:e3:eb:0a:29:41:5c:cb:44:da:ee:94:da:9d:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:D5:29:AC:0F:5D:2D:33:A6:3F:79:B3:B8:D7:2C:8A:EB:4B:AA
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:20:77:f7:75:1e:51:30:df:85:63:8d:35:34:68:16:77:
41:19:c6:85:71:ea:75:c2:81:a9:36:f4:c6:d4:0a:e3:3f:70:
41:0c:d5:f4:d8:77:e5:88:52:28:c1:ca:62:77:4c:23:87:b7:
21:57:69:19:ed:10:92:cd:09:73:29:70:29:06:87:d7:77:7d:
19:53:a8:58:59:f8:e9:fb:10:33:63:3e:6e:d4:1b:60:c3:39:
93:5c:ba:ab:60:58:ef:67:51:29:db:fe:a4:a2:db:42:6f:97:
c6:16:b7:21:59:0d:fd:f8:54:a5:41:23:66:a2:41:e0:fc:3e:
14:0f:69:08:93:66:c4:92:f3:32:5e:2a:14:39:9b:b3:f3:85:
28:ed:e3:50:20:89:e5:b6:5f:41:e8:8f:1b:4a:8d:51:bf:16:
d5:2f:eb:93:de:54:b7:c3:f2:19:e7:12:b0:57:2e:69:de:3d:
80:df:2e:a3:11:c3:20:2a:eb:1e:16:74:6a:6f:f0:6b:b2:06:
87:42:5d:0c:2e:40:f4:8f:a4:41:8f:59:ec:f3:ed:d5:82:57:
cb:24:cc:1a:b6:f6:e5:b1:6f:17:02:34:32:ea:1a:37:79:6a:
18:f8:d5:88:bd:d6:bb:67:a0:fa:dd:f8:d6:20:ab:51:54:67:
2b:dc:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:54 2025 by rpki-client