Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: lRDdq6QjPTZSi02V6KRLF3AQivgPwYp24rSGu4nyd1c=
Subject key identifier: 5C:57:3B:92:12:8A:C1:58:FA:9B:8D:B6:13:76:6D:7B:A9:96:F4:F3
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019845893F1A60486B4F7C8806A07191F8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:01:19 +0000
Manifest this update: Sat 26 Jul 2025 07:01:19 +0000
Manifest next update: Sun 27 Jul 2025 07:01:19 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: NvcTNfqRvfpXXlLdh5smP5M2zWhU40FdawrwcE8Ol24=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:3f:1a:60:48:6b:4f:7c:88:06:a0:71:91:f8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jul 26 07:01:19 2025 GMT
Not After : Jul 27 07:01:19 2025 GMT
Subject: CN=5c573b92128ac158fa9b8db613766d7ba996f4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:c7:7d:06:ae:00:be:38:18:db:77:60:13:
d1:49:36:45:be:91:a2:cc:1a:b2:f3:88:2d:4c:46:
8b:95:2b:81:47:40:07:f7:16:d5:67:45:84:fe:57:
00:a9:55:08:92:5c:f3:41:e0:74:71:3f:4d:00:52:
09:f9:29:bd:ec:0d:d9:06:17:5e:15:7c:22:ff:7c:
11:7d:ba:75:4f:64:3b:e7:7a:f5:24:57:c3:51:9a:
9f:fd:50:4f:bb:5c:7f:46:e1:b0:80:6d:cd:8a:6b:
2e:12:7a:21:80:79:e2:11:7c:75:48:57:b7:98:4c:
f0:d4:bf:cd:84:2a:61:d3:3a:50:5b:33:40:2a:2b:
92:f3:ca:ba:cf:2c:32:fc:6c:47:b1:a0:5c:ed:da:
c0:6d:74:c8:af:d3:b5:61:aa:dd:4d:75:fa:f4:33:
3d:f4:f7:26:79:f3:ac:89:c3:de:63:6b:f6:41:27:
ac:bd:74:82:52:3c:b8:ec:61:0a:4d:d5:d0:b6:4e:
93:99:95:d8:c1:6c:bf:3f:a3:e1:a5:e8:6a:7c:0a:
64:cd:79:00:62:dd:2b:cb:fa:be:c3:4f:a6:d5:61:
5b:38:4c:00:00:e6:f3:88:b5:13:8e:c5:92:c2:96:
84:4e:fc:33:8a:59:06:4d:d4:11:f4:df:57:da:61:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:3B:92:12:8A:C1:58:FA:9B:8D:B6:13:76:6D:7B:A9:96:F4:F3
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:01:ea:d4:75:7b:0e:dc:36:e7:99:8d:17:5b:61:af:d9:8e:
91:23:53:4d:ae:76:31:14:ab:1a:08:eb:f2:dd:7e:e1:6b:74:
06:3b:61:30:7d:d5:61:30:77:b2:ae:cd:73:79:35:cf:5d:8a:
24:03:6c:98:0a:30:e6:c7:40:7c:fa:91:26:ad:44:64:87:37:
ad:20:ae:bd:16:5c:5a:7d:91:03:58:fc:ed:d1:6a:9a:25:24:
68:98:2c:f2:9b:19:41:07:c9:91:b2:5c:3a:e3:66:f2:c7:94:
79:57:97:32:57:6d:e9:56:bb:56:42:97:65:2e:11:8c:97:20:
74:af:b4:1e:f2:9e:21:dc:26:8c:be:aa:04:6a:55:c0:51:60:
bd:de:1f:21:6a:e4:01:c4:e8:ea:56:cd:e1:da:c7:c5:42:9e:
fe:a0:1f:72:d4:15:23:24:d2:40:5e:86:c3:7b:35:e9:23:c4:
25:5d:38:62:5d:6d:32:45:58:17:8f:18:70:b8:20:c4:56:fa:
79:f4:99:b5:ba:0b:54:31:0f:ba:90:cb:a8:79:69:d2:96:9d:
71:d1:9b:7e:9d:78:07:38:65:9a:29:a0:9f:2d:61:2e:8e:e1:
08:f7:ca:29:aa:1c:c7:88:17:4d:4d:86:49:7e:c7:3d:46:e0:
6d:83:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:12 2025 by rpki-client