Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: ctxjt0nsA+NF8HKmgN1z4UeYaTpg9o/HH0q6uKHR9VI=
Subject key identifier: 3F:48:2A:1F:70:79:5B:A4:23:A7:01:04:F7:38:F5:07:FC:09:1F:06
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01993424D65BC086AAB804668033CA192D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 15:00:53 +0000
Manifest this update: Wed 10 Sep 2025 15:00:53 +0000
Manifest next update: Thu 11 Sep 2025 15:00:53 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: zcjSaT9GPoQ6W5Ioz01usVs4Bc50MhXnPlMMkpKvUuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:d6:5b:c0:86:aa:b8:04:66:80:33:ca:19:2d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Sep 10 15:00:53 2025 GMT
Not After : Sep 11 15:00:53 2025 GMT
Subject: CN=3f482a1f70795ba423a70104f738f507fc091f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:f3:f0:7c:30:0e:44:5d:30:bd:d1:3a:b8:
d6:e6:eb:e6:3f:da:c1:87:72:ba:c4:fc:ad:cf:8c:
6c:d6:75:7b:7a:9e:79:19:b2:91:f2:a5:5d:09:5f:
b3:68:fb:40:b4:5c:8e:df:2a:ef:49:6c:89:44:e1:
6d:eb:12:20:93:d4:10:df:39:4e:63:3c:1e:5f:3c:
1b:56:78:be:23:15:c3:96:cd:75:46:ca:b7:f0:b7:
d2:12:fa:3d:b3:12:86:1a:ac:e1:ec:e5:04:0b:ba:
99:5d:3a:ca:ae:ac:55:8f:dc:85:3b:76:06:70:da:
86:70:fc:bc:8e:90:a9:74:91:f1:c0:bb:92:ce:85:
62:9d:05:4c:ae:8b:a3:d7:20:51:e2:b2:72:18:07:
8a:a0:6f:31:e2:2d:9b:5b:b3:eb:aa:42:85:e0:75:
89:ce:10:70:fc:a5:53:c3:ca:f2:1c:ad:de:2e:c9:
e7:3e:85:19:f3:3c:66:dc:e2:af:48:f2:0d:c4:dd:
ee:93:5d:2c:4e:bb:7f:b5:04:86:73:34:c2:29:16:
0b:8c:95:ce:9d:30:76:1f:27:48:4a:c3:51:63:27:
ac:77:8b:92:32:32:87:93:09:85:8e:76:41:7a:6b:
89:35:67:2d:0d:66:ce:10:79:20:46:e2:6a:e6:bd:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:2A:1F:70:79:5B:A4:23:A7:01:04:F7:38:F5:07:FC:09:1F:06
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fd:0c:2b:1e:00:f2:75:08:01:ee:06:e5:07:00:47:0e:39:
67:38:f1:64:a7:09:ae:a3:6d:20:f9:a2:f2:19:84:3c:a6:95:
a2:6d:5f:6d:31:e0:91:85:eb:1d:19:bd:d1:8f:7d:27:50:8c:
de:5c:eb:75:85:36:4e:8c:79:13:64:a4:01:79:14:51:68:61:
12:13:5d:2c:7c:ea:c7:6f:25:2a:7d:1a:7c:d0:a1:29:c7:42:
d1:e5:77:8c:1e:75:23:94:ec:63:43:82:fc:1a:e2:68:ad:67:
00:bf:50:44:38:af:6b:d3:94:73:77:9b:e8:e3:78:38:3d:b2:
8f:54:c3:76:bd:da:e3:ea:19:e7:e7:47:19:66:bf:52:bf:43:
2d:c5:a4:d4:d0:4a:f1:52:e2:97:f1:ca:3f:69:48:43:32:df:
0d:a5:8d:5e:39:68:5c:b3:d9:e3:5a:a7:b4:1d:60:2a:6b:88:
c8:f3:73:d6:4a:24:00:d8:1a:d4:c7:32:5a:12:13:64:ee:32:
29:87:c6:a9:ca:dd:dd:b2:26:e4:97:96:52:f7:e7:ae:90:04:
d1:5c:d1:83:a0:7c:92:99:93:01:4d:98:c1:21:cf:24:ef:fc:
f8:e3:34:c8:95:67:a8:57:e2:b5:6f:07:ce:03:19:9b:57:2f:
b0:31:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:15:53 2025 by rpki-client